/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CVE-2024-2379

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2024-2379

Severity

Unknown

Description

libcurl skips the certificate verification for a QUIC connection under certain conditions, when built to use wolfSSL. If told to use an unknown/bad cipher or curve, the error path accidentally skips the verification and returns OK, thus ignoring any certificate problems.

References

Affected packages


The trusted source for open source

Talk to an expert
© 2025 Chainguard. All Rights Reserved.
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing