libcurl skips the certificate verification for a QUIC connection under certain conditions, when built to use wolfSSL. If told to use an unknown/bad cipher or curve, the error path accidentally skips the verification and returns OK, thus ignoring any certificate problems.
CVSS
No CVSS.
References
Configurations
No configuration.
History
30 Jul 2024, 02:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
30 Jul 2024, 01:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
29 Jul 2024, 22:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
Information
Published : 2024-03-27 08:15
Updated : 2024-07-30 02:15
NVD link : CVE-2024-2379
Mitre link : CVE-2024-2379
CVE.ORG link : CVE-2024-2379
JSON object : View
Products Affected
No product.
CWE
No CWE.