Improper check for certificate revocation in cURL - CVE-2024-0853

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU85927

Improper check for certificate revocation in cURL - CVE-2024-0853

Published: January 31, 2024


Vulnerability identifier: #VU85927
CSH Severity: Low
CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-0853
CWE-ID: CWE-299
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to bypass OCSP verification.

The vulnerability exists due to curl inadvertently keeps the SSL session ID for connections in its cache even when the verify status (OCSP stapling) test has failed. A subsequent transfer to the same hostname will be successful if the session ID cache is still fresh, which leads to skipping the verify status check. As a result, OCSP verification is always successful for all subsequent TLS sessions.


Affected software

cURL
IBM AIX
Amazon Linux AMI
Gentoo Linux
LANTIME Operating System Firmware (LTOS)
MySQL Enterprise Backup
MySQL Cluster
webMethods Managed File Transfer
Storage Resource Manager
Storage Protect Plus Server
Oracle HTTP Server
Data Lakehouse
EasyApache
Dell EMC Storage Monitoring and Reporting (SMR)
curl
net-misc/curl

How to mitigate CVE-2024-0853

Install updates from vendor's website.

cURL - update to 8.6.0
LANTIME Operating System Firmware (LTOS) - update to 7.08.009
Data Lakehouse - update to 1.3.0.0
EasyApache - update to 4 2024-2-7
Storage Resource Manager - update to 5.0.1.0
Dell EMC Storage Monitoring and Reporting (SMR) - update to 5.0.1.0
curl - update to 8.5.0-1
net-misc/curl - update to 8.7.1
Storage Protect Plus Server - update to 10.1.16.1

External References

Related Security Bulletins