CVE-2024-8096

Name of the Vulnerable Software and Affected Versions: curl versions prior to 8.10.0

Description: The issue is related to the improper validation of server certificates when using the Certificate Status Request TLS extension, also known as OCSP stapling. If the returned status reports an error other than 'revoked', such as 'unauthorized', it is not treated as a bad certificate. This could potentially allow for man-in-the-middle attacks due to improper validation.

Recommendations: For curl versions prior to 8.10.0, upgrade to version 8.10.0 or later to resolve the issue. As a temporary workaround, consider disabling the use of OCSP stapling until a patch is available. Restrict access to sensitive data and minimize the risk of exploitation by avoiding the use of vulnerable curl versions for critical operations.