Security bypass vulnerability in cURL

Beschreibung

An improper TLS connections handling was found in cURL. By exploiting this vulnerability malicious users can bypass sec. This vulnerability can be exploited remotely via TLS certificate manipulations.

---

Technical details

Libcurl affected only if mbedTLS or PolarSSL as TLS backend.

Ursprüngliche Informationshinweise

• Vendor advisory

CVE Liste

• CVE-2016-3739
  warning

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com