Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
QUIC certificate check skip with wolfSSL
Vulnerability Description
libcurl accidentally skips the certificate verification for QUIC connections when connecting to a host specified as an IP address in the URL. Therefore, it does not detect impostors or man-in-the-middle attacks.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
libcurl 安全漏洞
Vulnerability Description
libcurl是cURL开源的一个免费且易于使用的客户端 URL 传输库。 libcurl存在安全漏洞，该漏洞源于QUIC连接时跳过证书验证，可能导致中间人攻击。
CVSS Information
N/A
Vulnerability Type
N/A