Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:31372
HistoryJul 26, 2021 - 9:26 a.m.

Denial Of Service (DoS)

2021-07-2609:26:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
curl
denial of service
ssl vulnerability
file overriding

EPSS

0.005

Percentile

76.3%

curl is vulnerable to denial of service. The SSL backend fails to secure the CURLOPT_SSLCERT against current directory file overriding the keychain nickname specified, potentially resulting in the overriding the CURLOPT_SSLCERT specified certificate and thus causing denial of service.