Lucene search

K
redhatcveRedhat.comRH:CVE-2024-2379
HistoryMar 27, 2024 - 9:27 a.m.

CVE-2024-2379

2024-03-2709:27:05
redhat.com
access.redhat.com
14
curl
wolfssl
certificate verification
quic
cipher
curve

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.8%

A flaw was found in curl. When libcurl is built to use wolfSSL as the TLS backend, it skips certificate verification for a QUIC connection if an unknown/bad cipher or curve is used.