admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-05 10:17:57 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2024/CVE-2024-2466.md
0xMarcio 3e58935392 Update CVE sources 2024-08-10 19:04
2024-08-10 19:04:30 +00:00

994 B
Raw Permalink Blame History

CVE-2024-2466

Description

libcurl did not check the server certificate of TLS connections done to a host specified as an IP address, when built to use mbedTLS. libcurl would wrongly avoid using the set hostname function when the specified hostname was given as an IP address, therefore completely skipping the certificate check. This affects all uses of TLS protocols (HTTPS, FTPS, IMAPS, POPS3, SMTPS, etc).

POC

Reference

Github

No PoCs found on GitHub currently.