Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-35020.json
JSON Data
https://api.test.osv.dev/v1/vulns/AZL-35020
Upstream
Published
2023-12-12T02:15:06Z
Modified
2026-04-01T05:12:49.832847Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVSS Calculator
Summary
CVE-2023-46219 affecting package mysql for versions less than 8.0.40-1
Details

When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of the HSTS status they should otherwise use.

References

Affected packages

Azure Linux:3 / mysql

Package

Name
mysql
Purl
pkg:rpm/azure-linux/mysql

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.0.40-1

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-35020.json"