Vulnerability in Apple Mac OS X
CVE-2014-8151
The darwinssl_connect_step1 function in lib/vtls/curl_darwinssl.c in libcurl 7.31.0 through 7.39.0, when using the DarwinSSL (aka SecureTransport) back-end for TLS, does not check if a cached TLS session validated the certificate when reusing the session, which allows man-in-the-middle attackers to spoof servers via a crafted certificate.
EPSS: 0.011 (63.6th percentile) — read the EPSS interpretation.
Affected products
- Apple Mac_os_x
- Haxx Libcurl — versions 7.31.0, 7.32.0, 7.33.0
- N/a — versions n/a
References
- secalert@redhat.com (vendor-advisory, x_refsource_APPLE)
- secalert@redhat.com (x_refsource_CONFIRM, Vendor Advisory)
- secalert@redhat.com (x_refsource_CONFIRM)
- secalert@redhat.com (x_refsource_CONFIRM)
- secalert@redhat.com (vendor-advisory, x_refsource_GENTOO)
- secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory)