Certificate Validation

🗓️ 06 Apr 2024 00:34:26Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 33 Views

Vulnerability in libcurl certificate validation for QUIC connections

Reporter	Title	Published	Views	Family All 80
IBM Security Bulletins	Security Bulletin: IBM QRadar Wincollect is using components with known vulnerabilities	9 Jul 202417:03	–	ibm
IBM Security Bulletins	Security Bulletin: PowerSC is vulnerable to security restrictions bypass and denial of service due to Curl	28 Jun 202419:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2024.	15 Apr 202502:56	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Snappy, OpenSSL and cURL libcurl might affect IBM Storage Copy Data Management.	24 Jan 202519:13	–	ibm
AlpineLinux	CVE-2024-2379	27 Mar 202407:56	–	alpinelinux
Apple	About the security content of macOS Ventura 13.6.8	29 Jul 202400:00	–	apple
Apple	About the security content of macOS Monterey 12.7.6	29 Jul 202400:00	–	apple
Apple	About the security content of macOS Sonoma 14.6	29 Jul 202400:00	–	apple
Tenable Nessus	Azure Linux 3.0 Security Update: cmake (CVE-2024-2379)	22 Jan 202600:00	–	nessus
Tenable Nessus	Curl 8.6.0 < 8.7.0 QUIC Certificate Check Bypass (CVE-2024-2379)	29 Mar 202400:00	–	nessus

Vulners

Node

curl curlMatch7.72.0-1debian

AND

debian debian_linuxMatch999

curl curlMatch7.69.0-r1os

AND

curl curlMatch8.1.0-r3os

AND

curl curlMatch7.69.0-r0os

AND

curl curlMatch7.75.0-r0os

AND

curl curlMatch7.79.0-r0os

AND

curl curlMatch8.1.1-r1os

AND

curl curlMatch8.3.0-r0os

AND

curl curlMatch7.69.1-r0os

AND

curl curlMatch7.78.0-r0os

AND

curl curlMatch7.83.0-r0os

AND

curl curlMatch7.76.1-r0os

AND

curl curlMatch8.0.1-r2os

AND

curl curlMatch7.87.0-r1os

AND

curl curlMatch7.79.1-r0os

AND

curl curlMatch8.0.1-r3os

AND

curl curlMatch8.5.0-r0os

AND

curl curlMatch7.84.0-r1os

AND

curl curlMatch8.1.2-r0os

AND

curl curlMatch8.6.0-r0os

AND

curl curlMatch8.4.0-r0os

AND

curl curlMatch8.2.0-r1os

AND

curl curlMatch7.77.0-r1os

AND

curl curlMatch8.0.1-r1os

AND

curl curlMatch7.81.0-r1os

AND

curl curlMatch7.68.0-r0os

AND

curl curlMatch8.1.2-r2os

AND

curl curlMatch7.88.1-r1os

AND

curl curlMatch7.86.0-r1os

AND

curl curlMatch7.82.0-r0os

AND

curl curlMatch8.3.0-r1os

AND

curl curlMatch8.1.2-r1os

AND

curl curlMatch8.2.1-r0os

AND

curl curlMatch7.81.0-r0os

AND

curl curlMatch7.78.0-r2os

AND

curl curlMatch7.84.0-r0os

AND

curl curlMatch7.87.0-r3os

AND

curl curlMatch7.77.0-r0os

AND

curl curlMatch7.84.0-r2os

AND

curl curlMatch7.80.0-r0os

AND

curl curlMatch7.87.0-r0os

AND

curl curlMatch7.83.1-r1os

AND

curl curlMatch8.0.1-r0os

AND

curl curlMatch7.85.0-r0os

AND

curl curlMatch7.76.0-r0os

AND

alpinelinux alpine_linuxMatchedge

curl curlMatch7.87.0-r0os

AND

curl curlMatch8.4.0-r0os

AND

curl curlMatch8.1.2-r0os

AND

curl curlMatch7.88.1-r0os

AND

curl curlMatch7.87.0-r2os

AND

curl curlMatch8.5.0-r0os

AND

curl curlMatch7.86.0-r1os

AND

curl curlMatch8.1.0-r2os

AND

curl curlMatch8.0.1-r0os

AND

curl curlMatch8.3.0-r0os

AND

curl curlMatch7.88.1-r1os

AND

curl curlMatch8.1.1-r1os

AND

curl curlMatch7.87.0-r1os

AND

curl curlMatch8.2.1-r0os

AND

curl curlMatch8.2.0-r1os

AND

alpinelinux alpine_linuxMatch3.17

curl curlMatch8.1.1-r1os

AND

curl curlMatch8.5.0-r0os

AND

curl curlMatch8.1.0-r2os

AND

curl curlMatch8.4.0-r0os

AND

curl curlMatch8.3.0-r0os

AND

curl curlMatch8.2.0-r1os

AND

curl curlMatch8.2.1-r0os

AND

curl curlMatch8.1.2-r0os

AND

curl curlMatch8.0.1-r2os

AND

alpinelinux alpine_linuxMatch3.18

curl curlMatch8.4.0-r0os

AND

curl curlMatch8.5.0-r0os

AND

alpinelinux alpine_linuxMatch3.19

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2024-2379
seclists	www.seclists.org/fulldisclosure/2024/Jul/18
seclists	www.seclists.org/fulldisclosure/2024/Jul/19
seclists	www.seclists.org/fulldisclosure/2024/Jul/20
security	www.security.netapp.com/advisory/ntap-20240531-0001/
support	www.support.apple.com/kb/HT214118
support	www.support.apple.com/kb/HT214119
support	www.support.apple.com/kb/HT214120
openwall	www.openwall.com/lists/oss-security/2024/03/27/2
hackerone	www.hackerone.com/reports/2410774

30 Jul 2024 05:21Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.16.3

EPSS0.00205

SSVC