TLS Certificate Check Bypass

🗓️ 05 Apr 2024 02:09:20Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 23 Views

TLS Certificate Check Bypass in libcurl softwar

Reporter	Title	Published	Views	Family All 85
IBM Security Bulletins	Security Bulletin: IBM QRadar Wincollect is using components with known vulnerabilities	9 Jul 202417:03	–	ibm
IBM Security Bulletins	Security Bulletin: AIX is vulnerable to a denial of service (CVE-2024-2398) and security restrictions bypass (CVE-2024-2466, CVE-2024-2004) due to cURL libcurl	22 Aug 202422:08	–	ibm
IBM Security Bulletins	Security Bulletin: PowerSC is vulnerable to security restrictions bypass and denial of service due to Curl	28 Jun 202419:04	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Snappy, OpenSSL and cURL libcurl might affect IBM Storage Copy Data Management.	24 Jan 202519:13	–	ibm
AlpineLinux	CVE-2024-2466	27 Mar 202407:58	–	alpinelinux
Apple	About the security content of macOS Ventura 13.6.8	29 Jul 202400:00	–	apple
Apple	About the security content of macOS Monterey 12.7.6	29 Jul 202400:00	–	apple
Tenable Nessus	Azure Linux 3.0 Security Update: cmake / curl (CVE-2024-2466)	10 Feb 202500:00	–	nessus
Tenable Nessus	Curl 8.5.0 < 8.7.0 TLS Certificate Check Bypass (CVE-2024-2466)	29 Mar 202400:00	–	nessus
Tenable Nessus	GLSA-202409-20 : curl: Multiple Vulnerabilities	23 Sep 202400:00	–	nessus

Vulners

Node

curl curlMatch7.72.0-1debian

AND

debian debian_linuxMatch999

curl curlMatch7.69.0-r1os

AND

curl curlMatch7.82.0-r0os

AND

curl curlMatch8.1.1-r1os

AND

curl curlMatch8.1.2-r1os

AND

curl curlMatch7.81.0-r0os

AND

curl curlMatch7.84.0-r0os

AND

curl curlMatch8.0.1-r2os

AND

curl curlMatch7.85.0-r0os

AND

curl curlMatch7.68.0-r0os

AND

curl curlMatch8.0.1-r1os

AND

curl curlMatch7.79.0-r0os

AND

curl curlMatch7.69.0-r0os

AND

curl curlMatch8.6.0-r0os

AND

curl curlMatch8.3.0-r1os

AND

curl curlMatch7.77.0-r1os

AND

curl curlMatch8.1.2-r0os

AND

curl curlMatch7.84.0-r1os

AND

curl curlMatch8.0.1-r0os

AND

curl curlMatch7.87.0-r0os

AND

curl curlMatch8.1.0-r3os

AND

curl curlMatch7.75.0-r0os

AND

curl curlMatch7.76.0-r0os

AND

curl curlMatch8.2.0-r1os

AND

curl curlMatch8.3.0-r0os

AND

curl curlMatch8.4.0-r0os

AND

curl curlMatch7.86.0-r1os

AND

curl curlMatch8.1.2-r2os

AND

curl curlMatch7.84.0-r2os

AND

curl curlMatch8.5.0-r0os

AND

curl curlMatch7.80.0-r0os

AND

curl curlMatch7.83.1-r1os

AND

curl curlMatch7.76.1-r0os

AND

curl curlMatch7.87.0-r1os

AND

curl curlMatch8.2.1-r0os

AND

curl curlMatch8.0.1-r3os

AND

curl curlMatch7.83.0-r0os

AND

curl curlMatch7.77.0-r0os

AND

curl curlMatch7.78.0-r2os

AND

curl curlMatch7.87.0-r3os

AND

curl curlMatch7.69.1-r0os

AND

curl curlMatch7.81.0-r1os

AND

curl curlMatch7.79.1-r0os

AND

curl curlMatch7.88.1-r1os

AND

curl curlMatch7.78.0-r0os

AND

alpinelinux alpine_linuxMatchedge

curl curlMatch7.88.1-r0os

AND

curl curlMatch7.87.0-r2os

AND

curl curlMatch7.87.0-r0os

AND

curl curlMatch8.4.0-r0os

AND

curl curlMatch7.86.0-r1os

AND

curl curlMatch8.1.0-r2os

AND

curl curlMatch8.2.0-r1os

AND

curl curlMatch8.1.1-r1os

AND

curl curlMatch8.2.1-r0os

AND

curl curlMatch8.3.0-r0os

AND

curl curlMatch8.0.1-r0os

AND

curl curlMatch8.1.2-r0os

AND

curl curlMatch7.88.1-r1os

AND

curl curlMatch8.5.0-r0os

AND

curl curlMatch7.87.0-r1os

AND

alpinelinux alpine_linuxMatch3.17

curl curlMatch8.1.1-r1os

AND

curl curlMatch8.1.2-r0os

AND

curl curlMatch8.3.0-r0os

AND

curl curlMatch8.5.0-r0os

AND

curl curlMatch8.1.0-r2os

AND

curl curlMatch8.2.1-r0os

AND

curl curlMatch8.0.1-r2os

AND

curl curlMatch8.4.0-r0os

AND

curl curlMatch8.2.0-r1os

AND

alpinelinux alpine_linuxMatch3.18

curl curlMatch8.5.0-r0os

AND

curl curlMatch8.4.0-r0os

AND

alpinelinux alpine_linuxMatch3.19

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2024-2466
seclists	www.seclists.org/fulldisclosure/2024/Jul/18
seclists	www.seclists.org/fulldisclosure/2024/Jul/19
seclists	www.seclists.org/fulldisclosure/2024/Jul/20
security	www.security.netapp.com/advisory/ntap-20240503-0010/
support	www.support.apple.com/kb/HT214118
support	www.support.apple.com/kb/HT214119
support	www.support.apple.com/kb/HT214120
vicarius	www.vicarius.io/vsociety/posts/tls-certificate-check-bypass-curl-with-mbedtls-cve-2024-2466-2468
openwall	www.openwall.com/lists/oss-security/2024/03/27/4

23 Aug 2024 20:53Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.16.5

EPSS0.00149

SSVC