Lucene search
Alpine Linux Development TeamALPINE:CVE-2024-2466HistoryMar 27, 2024 - 8:15 a.m.
CVE-2024-2466
2024-03-2708:15:41
Alpine Linux Development Team
security.alpinelinux.org
15
libcurl
certificate
bypass
mbedtls
ip address
tls
protocol
unix
libcurl did not check the server certificate of TLS connections done to a host specified as an IP address, when built to use mbedTLS. libcurl would wrongly avoid using the set hostname function when the specified hostname was given as an IP address, therefore completely skipping the certificate check. This affects all uses of TLS protocols (HTTPS, FTPS, IMAPS, POPS3, SMTPS, etc).
Related
wolfi
wolfi
CVE-2024-2466 vulnerabilities
2024-05-18 21:07:16
redhatcve
redhatcve
CVE-2024-2466
2024-03-27 09:27:25
cvelist
cvelist
CVE-2024-2466 TLS certificate check bypass with mbedTLS
2024-03-27 07:58:24
ubuntucve
ubuntucve
CVE-2024-2466
2024-03-27 00:00:00
veracode
veracode
TLS Certificate Check Bypass
2024-04-05 02:09:20
nessus
nessus
Curl 8.5.0 < 8.7.0 TLS Certificate Check Bypass (CVE-2024-2466)
2024-03-29 00:00:00
hackerone
hackerone
debiancve
debiancve
CVE-2024-2466
2024-03-27 08:15:41
cve
cve
CVE-2024-2466
2024-03-27 08:15:41
cgr
cgr
CVE-2024-2466 vulnerabilities
2024-05-18 15:53:42
mageia
mageia
Updated curl packages fix security vulnerabilities
2024-03-29 06:49:09
openvas
openvas
Slackware: Security Advisory (SSA:2024-087-01)
2024-03-28 00:00:00
Mageia: Security Advisory (MGASA-2024-0099)
2024-04-05 00:00:00
slackware
slackware
[slackware-security] curl
2024-03-27 19:16:33
redhat
redhat