Security bypass vulnerability in cURL

Описание

An improper TLS connections handling was found in cURL. By exploiting this vulnerability malicious users can bypass sec. This vulnerability can be exploited remotely via TLS certificate manipulations.

---

Technical details

Libcurl affected only if mbedTLS or PolarSSL as TLS backend.

Первичный источник обнаружения

• Vendor advisory
  

Связанные продукты

• cURL

Список CVE

• CVE-2016-3739
  warning

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com