Skip to content
OpenAdvisories
Unscored DSA-2798-1 1 CVE

curl - unchecked ssl certificate host name

Published Nov 17, 2013 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 6.0 curl 7.21.0-2.1+squeeze5
Debian · 7 curl 7.26.0-1+wheezy5

Vulnerabilities 1

  • Unscored —

    cURL and libcurl 7.18.0 through 7.32.0, when built with OpenSSL, disables the certificate CN and SAN name field verific…