Report feedback

An attacker can make a request to the server http://curl.se using an unencrypted protocol that was explicitly disabled [1].

The vulnerability is present in product:

• curl; ==7.85.0, <=8.6.0

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

More information:

• CVE-2024-2004 at cve.org, NVD
• CWE-115 at cwe.mitre.org

The vulnerability was publicly disclosed 27. 3. 2024.

An attacker can bypass certificate verification for QUIC connections in libcurl if the library is built with wolfSSL and configured with the OPENSSL_COMPATIBLE_DEFAULTS symbol [2].

The vulnerability is present in product:

• curl; ==8.6.0

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

More information:

• CVE-2024-2379 at cve.org, NVD
• CWE-295 at cwe.mitre.org

The vulnerability was publicly disclosed 27. 3. 2024.

An attacker can cause a memory leak in the libcurl library by exceeding the limit of 1000 headers while HTTP/2 server push is enabled, which results in the memory allocated for these headers not being freed after the push operation ends [3].

The vulnerability is present in product:

• curl; ==7.44.0, <=8.6.0

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

More information:

• CVE-2024-2398 at cve.org, NVD
• CWE-772 at cwe.mitre.org

The vulnerability was publicly disclosed 27. 3. 2024.

An attacker can make an unverified TLS connection to a server specified as an IP address if the libcurl library is built to use mbedTLS [4].

The vulnerability is present in product:

• curl; ==8.5.0, <=8.6.0

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

More information:

• CVE-2024-2466 at cve.org, NVD
• CWE-297 at cwe.mitre.org

The vulnerability was publicly disclosed 27. 3. 2024.