The vulnerability of the cURL command-line utility relates to errors in the certificate validation process when substituting characters in TLS certificates for IDN names. This vulnerability allows a attacker to perform a “man-in-the-middle” attack.

The vulnerability of the cURL command-line utility is related to errors in the certificate validation process when comparing substitute characters in TLS certificates for IDN names. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middle” attack...