2 matches found
Debian DSA-2824-1 : curl - unchecked tls/ssl certificate host name
Marc Deslauriers discovered that curl, a file retrieval tool, would mistakenly skip verifying the CN and SAN name fields when digital signature verification was disabled in the libcurl GnuTLS backend. The default configuration for the curl package is not affected by this issue since the digital...
4CVSS5.5AI score0.02798EPSS
SaveExploits0References3
Debian: Security Advisory (DSA-2824-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
4CVSS7.4AI score0.02798EPSS
SaveExploits0References3
20