Lucene search
+L

6 matches found

osv_jlsec
osv_jlsec
•added 2026/05/04 1:12 p.m.•29 views

JLSEC-2026-415 libcurl skips the certificate verification for a QUIC connection under certain conditions, when...

libcurl skips the certificate verification for a QUIC connection under certain conditions, when built to use wolfSSL. If told to use an unknown/bad cipher or curve, the error path accidentally skips the verification and returns OK, thus ignoring any certificate problems...

6.3CVSS7.1AI score0.01863EPSS
SaveExploits1References14
RedHat Linux
RedHat Linux
•added 2024/05/07 3:44 p.m.•17 views

curl: QUIC certificate check bypass with wolfSSL

A flaw was found in curl. When libcurl is built to use wolfSSL as the TLS backend, it skips certificate verification for a QUIC connection if an unknown/bad cipher or curve is used...

6.3CVSS6.9AI score0.01863EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
•added 2024/03/29 3:30 a.m.•10 views

SUSE CVE-2024-2379

libcurl skips the certificate verification for a QUIC connection under certain conditions, when built to use wolfSSL. If told to use an unknown/bad cipher or curve, the error path accidentally skips the verification and returns OK, thus ignoring any certificate problems...

4.3CVSS7.1AI score0.01863EPSS
SaveExploits1References4
osv_debian
osv_debian
•added 2024/03/27 8:15 a.m.•10 views

DEBIAN-CVE-2024-2379

libcurl skips the certificate verification for a QUIC connection under certain conditions, when built to use wolfSSL. If told to use an unknown/bad cipher or curve, the error path accidentally skips the verification and returns OK, thus ignoring any certificate problems...

6.3CVSS7.1AI score0.01863EPSS
SaveExploits1References1
osv_alpine
osv_alpine
•added 2024/03/27 8:15 a.m.•12 views

ALPINE-CVE-2024-2379

libcurl skips the certificate verification for a QUIC connection under certain conditions, when built to use wolfSSL. If told to use an unknown/bad cipher or curve, the error path accidentally skips the verification and returns OK, thus ignoring any certificate problems...

6.3CVSS7.1AI score0.01863EPSS
SaveExploits1References1
Mend
Mend
•added 2024/03/27 7:56 a.m.•8 views

CVE-2024-2379

libcurl skips the certificate verification for a QUIC connection under certain conditions, when built to use wolfSSL. If told to use an unknown/bad cipher or curve, the error path accidentally skips the verification and returns OK, thus ignoring any certificate problems...

6.3CVSS7.1AI score0.01863EPSS
SaveExploits1References16
Rows per page
Query Builder