CVE-2024-2379

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-2379
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-2379.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-2379
Aliases
Downstream
ALPINE (1)
AZL (1)
BELL (1)
CGA (3)
CLEANSTART (6)
DEBIAN (1)
ECHO (1)
JLSEC (1)
MGASA (1)
openSUSE (1)
RHSA (1)
ROOT (1)
SUSE (1)
Related
Published
2024-03-27T07:56:41Z
Modified
2026-08-12T03:51:11Z
Severity
  • 6.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L CVSS Calculator
Summary
QUIC certificate check bypass with wolfSSL
Details

libcurl skips the certificate verification for a QUIC connection under certain conditions, when built to use wolfSSL. If told to use an unknown/bad cipher or curve, the error path accidentally skips the verification and returns OK, thus ignoring any certificate problems.

Database specific 
{
    "cna_assigner":  "curl",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/2xxx/CVE-2024-2379.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "introduced":  "8.6.0"
                },
                {
                    "last_affected":  "8.6.0"
                }
            ],
            "source":  "AFFECTED_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/curl/curl

Affected ranges

Type
GIT
Repo
https://github.com/curl/curl
Events
Introduced
5ce164e0e9290c96eb7d502173426c0a135ec008
Last Affected
5ce164e0e9290c96eb7d502173426c0a135ec008
Database specific
Show details 
{
    "cpe":  "cpe:2.3:a:haxx:curl:8.6.0:*:*:*:*:*:*:*",
    "extracted_events":  [
        {
            "introduced":  "8.6.0"
        },
        {
            "last_affected":  "8.6.0"
        }
    ],
    "source":  "CPE_STRING"
}

Affected versions

8.*
8.6.0
Other
curl-8_6_0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-2379.json"