CVE-2024-2466

Name of the Vulnerable Software and Affected Versions libcurl (affected versions not specified)

Description The issue is related to the implementation of TLS protocols in libcurl, where the server certificate is not checked when connecting to a host specified as an IP address, when built to use mbedTLS. This affects all uses of TLS protocols, including HTTPS, FTPS, IMAPS, POPS3, SMTPS, etc. The vulnerability can be exploited by a remote attacker to conduct spoofing attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.