AZL-37077 CVE-2024-2466 affecting package curl for versions less than 8.8.0-1

🗓️ 27 Mar 2024 08:15:41Reported by GoogleType

CVE-2024-2466: libcurl with mbedTLS skips certificate check for IP hostnames in TLS.

Reporter	Title	Published	Views	Family All 86
IBM Security Bulletins	Security Bulletin: IBM QRadar Wincollect is using components with known vulnerabilities	9 Jul 202417:03	–	ibm
IBM Security Bulletins	Security Bulletin: AIX is vulnerable to a denial of service (CVE-2024-2398) and security restrictions bypass (CVE-2024-2466, CVE-2024-2004) due to cURL libcurl	22 Aug 202422:08	–	ibm
IBM Security Bulletins	Security Bulletin: PowerSC is vulnerable to security restrictions bypass and denial of service due to Curl	28 Jun 202419:04	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Snappy, OpenSSL and cURL libcurl might affect IBM Storage Copy Data Management.	24 Jan 202519:13	–	ibm
AlpineLinux	CVE-2024-2466	27 Mar 202407:58	–	alpinelinux
Apple	About the security content of macOS Ventura 13.6.8	29 Jul 202400:00	–	apple
Apple	About the security content of macOS Monterey 12.7.6	29 Jul 202400:00	–	apple
Tenable Nessus	Azure Linux 3.0 Security Update: cmake / curl (CVE-2024-2466)	10 Feb 202500:00	–	nessus
Tenable Nessus	Curl 8.5.0 < 8.7.0 TLS Certificate Check Bypass (CVE-2024-2466)	29 Mar 202400:00	–	nessus
Tenable Nessus	GLSA-202409-20 : curl: Multiple Vulnerabilities	23 Sep 202400:00	–	nessus