Skip to content
OpenAdvisories
Medium USN-7012-1 1 CVE

curl vulnerability

Published Sep 16, 2024 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

Hiroki Kurosawa discovered that curl incorrectly handled certain OCSP
responses. This could result in bad certificates not being checked
properly, contrary to expectations.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS curl 7.68.0-1ubuntu2.24
Ubuntu · 22.04 LTS 22.04:LTS curl 7.81.0-1ubuntu1.18
Ubuntu · 24.04 LTS 24.04:LTS curl 8.5.0-2ubuntu10.4

Vulnerabilities 1

  • Medium 6.5
    CVE-2024-8096

    OCSP stapling bypass with GnuTLS

    When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is valid, it might fail to detect some OCSP problems and instead wrongly consider the response as fine. If the ret…

    curl curl mysql curl Debian Ubuntu Azure Linux Alpine Wolfi

References

  • report
    https://ubuntu.com/security/CVE-2024-8096