CVE-2024-2466
libcurl did not check the server certificate of TLS connections done to a host specified as an IP address, when built to use mbedTLS. libcurl would wrongly avoid using the set hostname function when the specified hostname was given as an IP address,…
Does this matter?
Lower severity and a low EPSS score (1.33%). Track it; it rarely justifies an emergency change on its own.
Description
libcurl did not check the server certificate of TLS connections done to a host specified as an IP address, when built to use mbedTLS. libcurl would wrongly avoid using the set hostname function when the specified hostname was given as an IP address, therefore completely skipping the certificate check. This affects all uses of TLS protocols (HTTPS, FTPS, IMAPS, POPS3, SMTPS, etc).
- CVSS 3.1
- 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
- EPSS
- 1.33% probability · 70th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-297
- Affected
- haxx/curl · apple/macos · netapp/h700s firmware · netapp/bootstrap os · netapp/h300s firmware · netapp/h410s firmware · netapp/h500s firmware
- Source
- 2499f714-1537-4658-8207-48ae4bb9eae9
References
- http://seclists.org/fulldisclosure/2024/Jul/18Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/19Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/20Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2024/03/27/4Mailing List, Third Party Advisory
- https://curl.se/docs/CVE-2024-2466.htmlVendor Advisory
- https://curl.se/docs/CVE-2024-2466.jsonVendor Advisory
- https://hackerone.com/reports/2416725Exploit, Issue Tracking, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20240503-0010/Third Party Advisory
- https://support.apple.com/kb/HT214118Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT214119Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT214120Release Notes, Vendor Advisory
- http://seclists.org/fulldisclosure/2024/Jul/18Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/19Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/20Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2024/03/27/4Mailing List, Third Party Advisory
- https://curl.se/docs/CVE-2024-2466.htmlVendor Advisory
- https://curl.se/docs/CVE-2024-2466.jsonVendor Advisory
- https://hackerone.com/reports/2416725Exploit, Issue Tracking, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20240503-0010/Third Party Advisory
- https://support.apple.com/kb/HT214118Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT214119Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT214120Release Notes, Vendor Advisory
- https://www.vicarius.io/vsociety/posts/tls-certificate-check-bypass-curl-with-mbedtls-cve-2024-2466-2468Exploit, Mitigation, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.