Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-35781.json
JSON Data
https://api.test.osv.dev/v1/vulns/AZL-35781
Upstream
Published
2023-12-12T02:15:06Z
Modified
2026-04-01T05:13:03.177387Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVSS Calculator
Summary
CVE-2023-46219 affecting package cmake for versions less than 3.29.6-1
Details

When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of the HSTS status they should otherwise use.

References

Affected packages

Azure Linux:3 / cmake

Package

Name
cmake
Purl
pkg:rpm/azure-linux/cmake

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.29.6-1

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-35781.json"