Log in Start free

Vulnerability · Published Mar 27, 2024 · Assigned by curl

CVE-2024-2466TLS certificate check bypass with mbedTLS

Medium 6.5

In plain English

A medium-severity security flaw in curl from curl. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.5% (higher than 74% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)1.5%top 26.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

libcurl did not check the server certificate of TLS connections done to a host specified as an IP address, when built to use mbedTLS. libcurl would wrongly avoid using the set hostname function when the specified hostname was given as an IP address, therefore completely skipping the certificate check. This affects all uses of TLS protocols (HTTPS, FTPS, IMAPS, POPS3, SMTPS, etc).

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.20curl8.7.1-r0ALPINE-CVE-2024-2466
Alpine:v3.21curl8.7.1-r0ALPINE-CVE-2024-2466
Alpine:v3.22curl8.7.1-r0ALPINE-CVE-2024-2466
Alpine:v3.23curl8.7.1-r0ALPINE-CVE-2024-2466
Alpine:v3.24curl8.7.1-r0ALPINE-CVE-2024-2466
Debian:13curl8.7.1-1DEBIAN-CVE-2024-2466
Debian:14curl8.7.1-1DEBIAN-CVE-2024-2466

Affected products (as reported)

VendorProductVersions
curl curl 8.6.0 – through 8.6.08.5.0 – through 8.5.0

Weakness: CWE-297 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

References