CVE-2023-46218: Medium severity F5 BIG-IP Next vulnerability

Published Nov 29, 2023
·
Updated

cURL libcurl could allow a remote attacker to bypass security restrictions, caused by a mixed case flaw when curl is built without PSL support. By sending a specially crafted request, an attacker could exploit this vulnerability to allow a HTTP server to set "super cookies" in curl.

Other sources

This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back to more origins than what is otherwise allowed or possible. This allows a site to set cookies that then would get sent to different and unrelated sites and domains.

It could do this by exploiting a mixed case flaw in curl's function that verifies a given cookie domain against the Public Suffix List (PSL). For example a cookie could be set with domain=co.UK when the URL used a lower case hostname curl.co.uk, even though co.uk is listed as a PSL domain.

— NVD

Affected Software

13 affected componentsFixes available
debian/curl
7.74.0-1.3+deb11u137.74.0-1.3+deb11u117.88.1-10+deb12u77.88.1-10+deb12u58.9.1-28.10.1-1
F5 BIG-IP Next>=20.0.1<=20.0.2
20.1.0
F5 BIG-IP Next Central Manager>=20.0.1<=20.0.2
20.1.0
F5 BIG-IP Next SPK>=1.7.0<=1.9.1
F5 BIG-IP Next CNF>=1.1.0<=1.2.1
F5 BIG-IP>=17.1.0<=17.1.1
F5 BIG-IP>=16.1.0<=16.1.4
F5 BIG-IP>=15.1.0<=15.1.10
F5 BIG-IQ Centralized Management>=8.0.0<=8.3.0
haxx curl>=7.46.0<=8.4.0
Fedoraproject Fedora=39
redhat/curl<8.5.0
8.5.0
IBM Storage Defender - Resiliency Service<=2.0.0 - 2.0.9

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade debian/curl to a version that resolves this vulnerability.

    Fixed in 7.74.0-1.3+deb11u13Fixed in 7.74.0-1.3+deb11u11Fixed in 7.88.1-10+deb12u7Fixed in 7.88.1-10+deb12u5Fixed in 8.9.1-2Fixed in 8.10.1-1
  2. Upgrade

    Upgrade F5 BIG-IP Next (LTM) to a version that resolves this vulnerability.

    Fixed in 20.1.0
  3. Upgrade

    Upgrade F5 BIG-IP Next Central Manager to a version that resolves this vulnerability.

    Fixed in 20.1.0
  4. Upgrade

    Upgrade redhat/curl to a version that resolves this vulnerability.

    Fixed in 8.5.0

Event History

Nov 29, 2023
Data Sourced
via Red Hat·05:48 AM
DescriptionSeverityAffected Software
Dec 7, 2023
CVE Published
via MITRE·01:10 AM
Data Sourced
via MITRE·01:10 AM
Description
Data Sourced
via NVD·01:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Feb 1, 2024
Data Sourced
via Launchpad·12:32 AM
Description
Feb 21, 2024
Advisory Published
via F5·07:57 AM
Sep 16, 2024
Data Sourced
via Ubuntu·04:18 AM
RemedyDescriptionSeverityAffected Software
Dec 18, 2024
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is CVE-2023-46218?

CVE-2023-46218 is a vulnerability related to cookie handling in the curl library, which allows for a mixed case Public Suffix List (PSL) bypass.

2

What is the severity of CVE-2023-46218?

The severity of CVE-2023-46218 is not specified in the provided information.

3

Which software is affected by CVE-2023-46218?

The affected software is 'curl' with versions up to exclusive 8.5.0 on Ubuntu, and versions up to inclusive 7.64.0-4+deb10u2, 7.64.0-4+deb10u7, 7.74.0-1.3+deb11u9, 7.74.0-1.3+deb11u10, 7.88.1-10+deb12u3, 7.88.1-10+deb12u4, and 8.4.0-2 on Debian.

4

How do I fix the CVE-2023-46218 vulnerability on Ubuntu?

To fix the CVE-2023-46218 vulnerability on Ubuntu, update the 'curl' package to version 8.5.0 or later.

5

How do I fix the CVE-2023-46218 vulnerability on Debian?

There is no specific remedy mentioned for the CVE-2023-46218 vulnerability on Debian. Consider monitoring the official Debian security advisories for updates or contact the package maintainers for more information.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203
CVE-2023-46218 - Medium severity F5 BIG-IP Next vulnerability - SecAlerts