Lucene search
Redhat.comRH:CVE-2024-2466HistoryMar 27, 2024 - 9:27 a.m.
CVE-2024-2466
2024-03-2709:27:25
redhat.com
access.redhat.com
24
curl
mbedtls
tls
ip address
server certificate
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
AI Score
7
Confidence
Low
EPSS
0
Percentile
13.5%
A flaw was found in curl. When curl is built to use mbedTLS as the TLS backend, it does not check the server certificate of TLS connections done to a host specified as an IP address.
Related
cbl_mariner
cbl_mariner
CVE-2024-2466 affecting package curl for versions less than 8.8.0-1
2024-08-05 03:22:58
CVE-2024-2466 affecting package cmake for versions less than 3.30.3-1
2024-10-01 18:58:50
CVE-2024-2466 affecting package curl for versions less than 8.8.0-1
2024-07-22 15:42:40
wolfi
wolfi
CVE-2024-2466 vulnerabilities
2024-10-04 09:12:11
ubuntucve
ubuntucve
CVE-2024-2466
2024-03-27 00:00:00
osv
osv
CGA-hx4m-3q2w-96wj
2024-06-06 12:27:56
TLS certificate check bypass with mbedTLS
2024-03-27 08:00:00
CVE-2024-2466
2024-03-27 08:15:41
nessus
nessus
Curl 8.5.0 < 8.7.0 TLS Certificate Check Bypass (CVE-2024-2466)
2024-03-29 00:00:00
CBL Mariner 2.0 Security Update: cmake / curl (CVE-2024-2466)
2024-08-06 00:00:00
hackerone
hackerone
veracode
veracode
TLS Certificate Check Bypass
2024-04-05 02:09:20
nvd
nvd
CVE-2024-2466
2024-03-27 08:15:41
cvelist
cvelist
CVE-2024-2466 TLS certificate check bypass with mbedTLS
2024-03-27 07:58:24
alpinelinux
alpinelinux
CVE-2024-2466
2024-03-27 08:15:41
cgr
cgr
CVE-2024-2466 vulnerabilities
2024-05-19 03:07:16
vulnrichment
vulnrichment
CVE-2024-2466 TLS certificate check bypass with mbedTLS
2024-03-27 07:58:24
debiancve
debiancve
CVE-2024-2466
2024-03-27 08:15:41
cve
cve
CVE-2024-2466
2024-03-27 08:15:41
aix
aix
ibm
ibm
Security Bulletin: AIX is vulnerable to a denial of service (CVE-2024-2398) and security restrictions bypass (CVE-2024-2466, CVE-2024-2004) due to cURL libcurl
2024-08-22 22:08:28
openvas
openvas
Mageia: Security Advisory (MGASA-2024-0099)
2024-04-05 00:00:00
Slackware: Security Advisory (SSA:2024-087-01)
2024-03-28 00:00:00
Apple MacOSX Security Update (HT214118)
2024-07-30 00:00:00
slackware
slackware
[slackware-security] curl
2024-03-27 19:16:33
mageia
mageia
Updated curl packages fix security vulnerabilities
2024-03-29 06:49:09
redhat
redhat
gentoo
gentoo
curl: Multiple Vulnerabilities
2024-09-23 00:00:00
ics
ics
Siemens SINEMA
2024-09-12 12:00:00
apple
apple
About the security content of macOS Monterey 12.7.6
2024-07-29 00:00:00
About the security content of macOS Ventura 13.6.8
2024-07-29 00:00:00
About the security content of macOS Sonoma 14.6
2024-07-29 00:00:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
AI Score
7
Confidence
Low
EPSS
0
Percentile
13.5%
Related for RH:CVE-2024-2466