Поиск уязвимостей
Количество 5
Количество 5
CVE-2016-9952
The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when built for Windows CE using the schannel TLS backend, makes it easier for remote attackers to conduct man-in-the-middle attacks via a crafted wildcard SAN in a server certificate, as demonstrated by "*.com."
CVE-2016-9952
The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when built for Windows CE using the schannel TLS backend, makes it easier for remote attackers to conduct man-in-the-middle attacks via a crafted wildcard SAN in a server certificate, as demonstrated by "*.com."
CVE-2016-9952
The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30 ...
GHSA-j357-mfhx-p456
The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when built for Windows CE using the schannel TLS backend, makes it easier for remote attackers to conduct man-in-the-middle attacks via a crafted wildcard SAN in a server certificate, as demonstrated by "*.com."
ALT-PU-2016-2472
ALT-PU-2016-2472: package `curl` update to version 7.52.0-alt1.S1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2016-9952 The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when built for Windows CE using the schannel TLS backend, makes it easier for remote attackers to conduct man-in-the-middle attacks via a crafted wildcard SAN in a server certificate, as demonstrated by "*.com." | CVSS3: 8.1 | 1% Низкий | больше 8 лет назад |
 | CVE-2016-9952 The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when built for Windows CE using the schannel TLS backend, makes it easier for remote attackers to conduct man-in-the-middle attacks via a crafted wildcard SAN in a server certificate, as demonstrated by "*.com." | CVSS3: 8.1 | 1% Низкий | больше 8 лет назад |
| CVE-2016-9952 The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30 ... | CVSS3: 8.1 | 1% Низкий | больше 8 лет назад |
| GHSA-j357-mfhx-p456 The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when built for Windows CE using the schannel TLS backend, makes it easier for remote attackers to conduct man-in-the-middle attacks via a crafted wildcard SAN in a server certificate, as demonstrated by "*.com." | CVSS3: 8.1 | 1% Низкий | больше 4 лет назад |
| ALT-PU-2016-2472 ALT-PU-2016-2472: package `curl` update to version 7.52.0-alt1.S1 | CVSS3: 9.8 | почти 10 лет назад |
Уязвимостей на страницу