Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd2499f714-1537-4658-8207-48ae4bb9eae9NVD:CVE-2024-2379
HistoryMar 27, 2024 - 8:15 a.m.

CVE-2024-2379

2024-03-2708:15:41
2499f714-1537-4658-8207-48ae4bb9eae9
web.nvd.nist.gov
7
libcurl
certificate verification
quic
wolfssl
error path
unknown cipher

AI Score

7.4

Confidence

High

EPSS

0

Percentile

13.5%

JSON

libcurl skips the certificate verification for a QUIC connection under certain conditions, when built to use wolfSSL. If told to use an unknown/bad cipher or curve, the error path accidentally skips the verification and returns OK, thus ignoring any certificate problems.

Related

alpinelinux 1
hackerone 2
nessus 9
veracode 1
osv 4
cve 1
vulnrichment 1
wolfi 1
ubuntucve 1
cvelist 1
redhatcve 1
debiancve 1
cgr 1
mageia 1
openvas 5
ibm 3
slackware 1
redhat 2
ics 1
apple 3
alpinelinux
alpinelinux
CVE-2024-2379
2024-03-27 08:15:41
hackerone
hackerone
curl: CVE-2024-2379: QUIC certificate check bypass with wolfSSL
2024-03-10 21:32:06
Internet Bug Bounty: CVE-2024-2379: QUIC certificate check bypass with wolfSSL
2024-03-27 16:39:42
nessus
nessus
Curl 8.6.0 < 8.7.0 QUIC Certificate Check Bypass (CVE-2024-2379)
2024-03-29 00:00:00
Slackware Linux 15.0 / current curl Multiple Vulnerabilities (SSA:2024-087-01)
2024-03-27 00:00:00
RHEL 7 / 8 : Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP4 (RHSA-2024:2693)
2024-05-07 00:00:00
veracode
veracode
Certificate Validation
2024-04-06 00:34:26
osv
osv
QUIC certificate check bypass with wolfSSL
2024-03-27 08:00:00
CVE-2024-2379
2024-03-27 08:15:41
CGA-8qrc-rj3g-jgxw
2024-06-06 12:25:42
cve
cve
CVE-2024-2379
2024-03-27 08:15:41
vulnrichment
vulnrichment
CVE-2024-2379 QUIC certificate check bypass with wolfSSL
2024-03-27 07:56:41
wolfi
wolfi
CVE-2024-2379 vulnerabilities
2024-09-30 03:53:08
ubuntucve
ubuntucve
CVE-2024-2379
2024-03-27 00:00:00
cvelist
cvelist
CVE-2024-2379 QUIC certificate check bypass with wolfSSL
2024-03-27 07:56:41
redhatcve
redhatcve
CVE-2024-2379
2024-03-27 09:27:05
debiancve
debiancve
CVE-2024-2379
2024-03-27 08:15:41
cgr
cgr
CVE-2024-2379 vulnerabilities
2024-05-19 03:07:16
mageia
mageia
Updated curl packages fix security vulnerabilities
2024-03-29 06:49:09
openvas
openvas
Slackware: Security Advisory (SSA:2024-087-01)
2024-03-28 00:00:00
Mageia: Security Advisory (MGASA-2024-0099)
2024-04-05 00:00:00
Apple MacOSX Security Update (HT214118)
2024-07-30 00:00:00
ibm
ibm
Security Bulletin: PowerSC is vulnerable to security restrictions bypass and denial of service due to Curl
2024-06-28 19:04:01
Security Bulletin: IBM QRadar Wincollect is using components with known vulnerabilities
2024-07-09 17:03:12
Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2024.
2024-09-08 15:34:03
slackware
slackware
[slackware-security] curl
2024-03-27 19:16:33
redhat
redhat
(RHSA-2024:2694) Moderate: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP4 security update
2024-05-07 15:42:50
(RHSA-2024:2693) Moderate: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP4 security update
2024-05-07 15:42:47
ics
ics
Siemens SINEMA
2024-09-12 12:00:00
apple
apple
About the security content of macOS Monterey 12.7.6
2024-07-29 00:00:00
About the security content of macOS Ventura 13.6.8
2024-07-29 00:00:00
About the security content of macOS Sonoma 14.6
2024-07-29 00:00:00

AI Score

7.4

Confidence

High

EPSS

0

Percentile

13.5%

JSON
Related for NVD:CVE-2024-2379
alpinelinux1hackerone2nessus9veracode1osv4cve1vulnrichment1wolfi1ubuntucve1cvelist1redhatcve1debiancve1cgr1mageia1openvas5ibm3slackware1redhat2ics1apple3