CVE-2024-2379 — QUIC certificate check bypass with wolfSSL
libcurl skips the certificate verification for a QUIC connection under certain conditions, when built to use wolfSSL. If told to use an unknown/bad cipher or curve, the error pa…
Published: 2024-03-27 · CVSS: 6.3 · CVSS 3.1
libcurl skips the certificate verification for a QUIC connection under certain conditions, when built to use wolfSSL. If told to use an unknown/bad cipher or curve, the error path accidentally skips the verification and returns OK, thus ignoring any certificate problems.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7