Skip to content
OpenAdvisories
Unscored DSA-1869-1 1 CVE

curl - SSL certificate verification weakness

Published Aug 19, 2009 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 4.0 curl 7.15.5-1etch3
Debian · 5.0 curl 7.18.2-8lenny3

Vulnerabilities 1

  • Unscored —

    lib/ssluse.c in cURL and libcurl 7.4 through 7.19.5, when OpenSSL is used, does not properly handle a '\0' character in…