CURL-CVE-2024-0853

See a problem?
Please try reporting it to the source first.
Source
https://curl.se/docs/CVE-2024-0853.html
Import Source
https://curl.se/docs/CURL-CVE-2024-0853.json
JSON Data
https://api.test.osv.dev/v1/vulns/CURL-CVE-2024-0853
Aliases
Published
2024-01-31T08:00:00Z
Modified
2024-09-11T06:13:45.681729Z
Summary
OCSP verification bypass with TLS session reuse
Details

curl inadvertently kept the SSL session ID for connections in its cache even when the verify status (OCSP stapling) test failed. A subsequent transfer to the same hostname could then succeed if the session ID cache was still fresh, which then skipped the verify status check.

Database specific 
{
    "package": "curl",
    "CWE": {
        "desc": "Improper Check for Certificate Revocation",
        "id": "CWE-299"
    },
    "issue": "https://hackerone.com/reports/2298922",
    "award": {
        "amount": "540",
        "currency": "USD"
    },
    "www": "https://curl.se/docs/CVE-2024-0853.html",
    "URL": "https://curl.se/docs/CVE-2024-0853.json",
    "last_affected": "8.5.0",
    "affects": "both",
    "severity": "Low"
}
References
Credits
    • Hiroki Kurosawa - FINDER
    • Daniel Stenberg - REMEDIATION_DEVELOPER

Affected packages

Git / github.com/curl/curl.git

Affected ranges

Type
SEMVER
Events
Introduced
8.5.0
Fixed
8.6.0
Type
GIT
Repo
https://github.com/curl/curl.git
Events
Introduced
395365ad2d9a6c3f1a35d5e268a6af2824129832
Fixed
c28e9478cb2548848eca9b765d0d409bfb18668c

Affected versions

8.*

8.5.0

Database specific

vanir_signatures

[
    {
        "source": "https://github.com/curl/curl.git/commit/c28e9478cb2548848eca9b765d0d409bfb18668c",
        "digest": {
            "length": 5025.0,
            "function_hash": "238450730006193140542600700210748384811"
        },
        "id": "CURL-CVE-2024-0853-79861d54",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "function": "servercert",
            "file": "lib/vtls/openssl.c"
        },
        "signature_type": "Function"
    },
    {
        "source": "https://github.com/curl/curl.git/commit/c28e9478cb2548848eca9b765d0d409bfb18668c",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "114497631425936863817012993526107534880",
                "115198909464429285217625058644659829226",
                "10745843113687217952865983450508381750",
                "237704628286891606960412530438035785442"
            ]
        },
        "id": "CURL-CVE-2024-0853-ce49dbcc",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "file": "lib/vtls/openssl.c"
        },
        "signature_type": "Line"
    }
]