CVE-2024-2379

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://seclists.org/fulldisclosure/2024/Jul/18", "name": "http://seclists.org/fulldisclosure/2024/Jul/18", "tags": ["Mailing List", "Third Party Advisory"], "refsource": ""}, {"url": "http://seclists.org/fulldisclosure/2024/Jul/18", "name": "http://seclists.org/fulldisclosure/2024/Jul/18", "tags": ["Mailing List", "Third Party Advisory"], "refsource": ""}, {"url": "http://seclists.org/fulldisclosure/2024/Jul/19", "name": "http://seclists.org/fulldisclosure/2024/Jul/19", "tags": ["Mailing List", "Third Party Advisory"], "refsource": ""}, {"url": "http://seclists.org/fulldisclosure/2024/Jul/19", "name": "http://seclists.org/fulldisclosure/2024/Jul/19", "tags": ["Mailing List", "Third Party Advisory"], "refsource": ""}, {"url": "http://seclists.org/fulldisclosure/2024/Jul/20", "name": "http://seclists.org/fulldisclosure/2024/Jul/20", "tags": ["Mailing List", "Third Party Advisory"], "refsource": ""}, {"url": "http://seclists.org/fulldisclosure/2024/Jul/20", "name": "http://seclists.org/fulldisclosure/2024/Jul/20", "tags": ["Mailing List", "Third Party Advisory"], "refsource": ""}, {"url": "http://www.openwall.com/lists/oss-security/2024/03/27/2", "name": "http://www.openwall.com/lists/oss-security/2024/03/27/2", "tags": ["Mailing List", "Third Party Advisory"], "refsource": ""}, {"url": "http://www.openwall.com/lists/oss-security/2024/03/27/2", "name": "http://www.openwall.com/lists/oss-security/2024/03/27/2", "tags": ["Mailing List", "Third Party Advisory"], "refsource": ""}, {"url": "https://curl.se/docs/CVE-2024-2379.html", "name": "www", "tags": ["Vendor Advisory"], "refsource": ""}, {"url": "https://curl.se/docs/CVE-2024-2379.html", "name": "www", "tags": ["Vendor Advisory"], "refsource": ""}, {"url": "https://curl.se/docs/CVE-2024-2379.json", "name": "json", "tags": ["Vendor Advisory"], "refsource": ""}, {"url": "https://curl.se/docs/CVE-2024-2379.json", "name": "json", "tags": ["Vendor Advisory"], "refsource": ""}, {"url": "https://hackerone.com/reports/2410774", "name": "issue", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "refsource": ""}, {"url": "https://hackerone.com/reports/2410774", "name": "issue", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "refsource": ""}, {"url": "https://security.netapp.com/advisory/ntap-20240531-0001/", "name": "https://security.netapp.com/advisory/ntap-20240531-0001/", "tags": ["Third Party Advisory"], "refsource": ""}, {"url": "https://security.netapp.com/advisory/ntap-20240531-0001/", "name": "https://security.netapp.com/advisory/ntap-20240531-0001/", "tags": ["Third Party Advisory"], "refsource": ""}, {"url": "https://support.apple.com/kb/HT214118", "name": "https://support.apple.com/kb/HT214118", "tags": ["Release Notes", "Vendor Advisory"], "refsource": ""}, {"url": "https://support.apple.com/kb/HT214118", "name": "https://support.apple.com/kb/HT214118", "tags": ["Release Notes", "Vendor Advisory"], "refsource": ""}, {"url": "https://support.apple.com/kb/HT214119", "name": "https://support.apple.com/kb/HT214119", "tags": ["Release Notes", "Vendor Advisory"], "refsource": ""}, {"url": "https://support.apple.com/kb/HT214119", "name": "https://support.apple.com/kb/HT214119", "tags": ["Release Notes", "Vendor Advisory"], "refsource": ""}, {"url": "https://support.apple.com/kb/HT214120", "name": "https://support.apple.com/kb/HT214120", "tags": ["Release Notes", "Vendor Advisory"], "refsource": ""}, {"url": "https://support.apple.com/kb/HT214120", "name": "https://support.apple.com/kb/HT214120", "tags": ["Release Notes", "Vendor Advisory"], "refsource": ""}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "libcurl skips the certificate verification for a QUIC connection under certain conditions, when built to use wolfSSL. If told to use an unknown/bad cipher or curve, the error path accidentally skips the verification and returns OK, thus ignoring any certificate problems."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-295"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2024-2379", "ASSIGNER": "cve@curl.se"}}, "impact": {}, "publishedDate": "2024-03-27T08:15Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:haxx:curl:8.6.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "12.7.6"}, {"cpe23Uri": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "14.6", "versionStartIncluding": "14.0"}, {"cpe23Uri": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "13.6.8", "versionStartIncluding": "13.0"}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}]}], "operator": "AND", "cpe_match": []}, {"children": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}]}], "operator": "AND", "cpe_match": []}, {"children": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}]}], "operator": "AND", "cpe_match": []}, {"children": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:netapp:h610c_firmware:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:h:netapp:h610c:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}]}], "operator": "AND", "cpe_match": []}, {"children": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:netapp:h610s_firmware:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:h:netapp:h610s:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}]}], "operator": "AND", "cpe_match": []}, {"children": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:netapp:h615c_firmware:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:h:netapp:h615c:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}]}], "operator": "AND", "cpe_match": []}, {"children": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}]}], "operator": "AND", "cpe_match": []}, {"children": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:netapp:bootstrap_os:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}]}], "operator": "AND", "cpe_match": []}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2025-07-30T19:42Z"}