Lucene search

K
redhatcveRedhat.comRH:CVE-2024-2379
HistoryMar 27, 2024 - 9:27 a.m.

CVE-2024-2379

2024-03-2709:27:05
redhat.com
access.redhat.com
23
curl
wolfssl
certificate verification
quic
cipher
curve

AI Score

7

Confidence

Low

EPSS

0

Percentile

13.5%

A flaw was found in curl. When libcurl is built to use wolfSSL as the TLS backend, it skips certificate verification for a QUIC connection if an unknown/bad cipher or curve is used.