Lucene search
PRIOn knowledge basePRION:CVE-2024-0853HistoryFeb 03, 2024 - 2:15 p.m.
Design/Logic Flaw
2024-02-0314:15:00
PRIOn knowledge base
www.prio-n.com
11
design logic flaw
ssl session id
cache
verify status check
nvd
curl inadvertently kept the SSL session ID for connections in its cache even when the verify status (OCSP stapling) test failed. A subsequent transfer to
the same hostname could then succeed if the session ID cache was still fresh, which then skipped the verify status check.
Related
redhatcve
redhatcve
CVE-2024-0853
2024-01-31 23:49:08
cgr
cgr
CVE-2024-0853 vulnerabilities
2024-05-19 03:07:16
osv
osv
CVE-2024-0853
2024-02-03 14:15:50
OCSP verification bypass with TLS session reuse
2024-01-31 08:00:00
aix
aix
freebsd
freebsd
curl -- OCSP verification bypass with TLS session reuse
2024-01-31 00:00:00
wolfi
wolfi
CVE-2024-0853 vulnerabilities
2024-07-06 03:08:40
nvd
nvd
CVE-2024-0853
2024-02-03 14:15:50
debiancve
debiancve
CVE-2024-0853
2024-02-03 14:15:50
hackerone
hackerone
curl: CVE-2024-0853: OCSP verification bypass with TLS session reuse
2023-12-29 02:22:16
cvelist
cvelist
CVE-2024-0853 OCSP verification bypass with TLS session reuse
2024-02-03 13:35:25
ibm
ibm
ubuntucve
ubuntucve
CVE-2024-0853
2024-01-31 00:00:00
veracode
veracode
Improper Certificate Validation
2024-02-03 03:55:20
nessus
nessus
Curl 8.5.0 < 8.6.0 Security Bypass (CVE-2024-0853)
2024-02-02 00:00:00
Amazon Linux 2023 : curl, curl-minimal, libcurl (ALAS2023-2024-581)
2024-04-03 00:00:00
cve
cve
CVE-2024-0853
2024-02-03 14:15:50
alpinelinux
alpinelinux
CVE-2024-0853
2024-02-03 14:15:50
oracle
oracle
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00