Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
QUIC certificate check bypass with wolfSSL
Vulnerability Description
libcurl skips the certificate verification for a QUIC connection under certain conditions, when built to use wolfSSL. If told to use an unknown/bad cipher or curve, the error path accidentally skips the verification and returns OK, thus ignoring any certificate problems.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Curl 安全漏洞
Vulnerability Description
curl是一款用于从服务器传输数据或向服务器传输数据的工具。 Curl 8.6.0 到 8.6.0版本存在安全漏洞，该漏洞源于使用 WolfSSL 时，libcurl 在某些条件下会跳过 QUIC 连接的证书验证。
CVSS Information
N/A
Vulnerability Type
N/A