SUSE update for curl

1) Improper certificate validation

EUVDB-ID: #VU97150

Risk: Low

CVSSv3.1: 3.7 [CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2024-8096

CWE-ID: CWE-295 - Improper Certificate Validation

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform MitM attack.

The vulnerability exists due to curl might fail to detect some OCSP problems when configured to use the Certificate Status Request TLS extension. A remote attacker can bypass OCSP stapling protection and perform a Man-in-the-Middle (MitM) attack.

Successful exploitation of the vulnerability requires that curl is build to use GnuTLS library.

Mitigation

Update the affected package curl to the latest version.

Vulnerable software versions

Basesystem Module: 15-SP6

SUSE Linux Enterprise Real Time 15: SP6

openSUSE Leap: 15.6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

SUSE Linux Enterprise Desktop 15: SP6

libcurl4-64bit-debuginfo: before 8.6.0-150600.4.6.1

libcurl4-64bit: before 8.6.0-150600.4.6.1

libcurl-devel-64bit: before 8.6.0-150600.4.6.1

libcurl4-32bit: before 8.6.0-150600.4.6.1

libcurl-devel-32bit: before 8.6.0-150600.4.6.1

libcurl4-32bit-debuginfo: before 8.6.0-150600.4.6.1

curl-debugsource: before 8.6.0-150600.4.6.1

curl: before 8.6.0-150600.4.6.1

curl-debuginfo: before 8.6.0-150600.4.6.1

libcurl4-debuginfo: before 8.6.0-150600.4.6.1

libcurl-devel: before 8.6.0-150600.4.6.1

libcurl4: before 8.6.0-150600.4.6.1

CPE2.3

• cpe:2.3:o:suse:basesystem_module:15-SP6:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP6:*:*:*:*:*:*:
• cpe:2.3:o:suse:opensuse_leap:15.6:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:
• cpe:2.3:o:suse:suse_linux_enterprise_desktop_15:SP6:*:*:*:*:*:*:

External links

http://www.suse.com/support/update/announcement/2024/suse-su-20243204-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.