CVE-2024-2379

🗓️ 27 Mar 2024 07:56:41Reported by curlType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 328 Views

libcurl skips certificate verification for QUIC connection if using unknown cipher or curv

Reporter	Title	Published	Views	Family All 78
IBM Security Bulletins	Security Bulletin: IBM QRadar Wincollect is using components with known vulnerabilities	9 Jul 202417:03	–	ibm
IBM Security Bulletins	Security Bulletin: PowerSC is vulnerable to security restrictions bypass and denial of service due to Curl	28 Jun 202419:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2024.	15 Apr 202502:56	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Snappy, OpenSSL and cURL libcurl might affect IBM Storage Copy Data Management.	24 Jan 202519:13	–	ibm
AlpineLinux	CVE-2024-2379	27 Mar 202407:56	–	alpinelinux
Apple	About the security content of macOS Ventura 13.6.8	29 Jul 202400:00	–	apple
Apple	About the security content of macOS Monterey 12.7.6	29 Jul 202400:00	–	apple
Apple	About the security content of macOS Sonoma 14.6	29 Jul 202400:00	–	apple
Tenable Nessus	Azure Linux 3.0 Security Update: cmake (CVE-2024-2379)	22 Jan 202600:00	–	nessus
Tenable Nessus	Curl 8.6.0 < 8.7.0 QUIC Certificate Check Bypass (CVE-2024-2379)	29 Mar 202400:00	–	nessus

NVD

Node

haxx curlMatch8.6.0

Node

apple macosRange<12.7.6

apple macosRange13.0–13.6.8

apple macosRange14.0–14.6

Node

netapp active_iq_unified_managerMatch-vmware_vsphere

netapp ontap_select_deploy_administration_utilityMatch-

Node

netapp h300s_firmwareMatch-

AND

netapp h300sMatch-

Node

netapp h410s_firmwareMatch-

AND

netapp h410sMatch-

Node

netapp h500s_firmwareMatch-

AND

netapp h500sMatch-

Node

netapp h610c_firmwareMatch-

AND

netapp h610cMatch-

Node

netapp h610s_firmwareMatch-

AND

netapp h610sMatch-

Node

netapp h615c_firmwareMatch-

AND

netapp h615cMatch-

Node

netapp h700s_firmwareMatch-

AND

netapp h700sMatch-

Node

netapp bootstrap_osMatch-

AND

netapp hci_compute_nodeMatch-

[
  {
    "vendor": "curl",
    "product": "curl",
    "versions": [
      {
        "version": "8.6.0",
        "status": "affected",
        "lessThanOrEqual": "8.6.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
support	www.support.apple.com/kb/HT214119
support	www.support.apple.com/kb/HT214120
seclists	www.seclists.org/fulldisclosure/2024/Jul/19
curl	www.curl.se/docs/CVE-2024-2379.html
seclists	www.seclists.org/fulldisclosure/2024/Jul/18
seclists	www.seclists.org/fulldisclosure/2024/Jul/20
curl	www.curl.se/docs/CVE-2024-2379.json
support	www.support.apple.com/kb/HT214118
openwall	www.openwall.com/lists/oss-security/2024/03/27/2
security	www.security.netapp.com/advisory/ntap-20240531-0001/

30 Jul 2025 19:42Current

7.1High risk

Vulners AI Score7.1

CVSS 3.16.3

EPSS0.00205

SSVC

CWE-295