Libcurl · Libcurl · CVE-2024-2466
**Name of the Vulnerable Software and Affected Versions**
libcurl (affected versions not specified)
**Description**
The issue is related to the implementation of TLS protocols in libcurl, where the server certificate is not checked when connecting to a host specified as an IP address, when built to use mbedTLS. This affects all uses of TLS protocols, including HTTPS, FTPS, IMAPS, POPS3, SMTPS, etc. The vulnerability can be exploited by a remote attacker to conduct spoofing attacks.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.