Ubuntu update for curl

1) Improper certificate validation

EUVDB-ID: #VU97150

Risk: Low

CVSSv3.1: 3.7 [CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2024-8096

CWE-ID: CWE-295 - Improper Certificate Validation

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform MitM attack.

The vulnerability exists due to curl might fail to detect some OCSP problems when configured to use the Certificate Status Request TLS extension. A remote attacker can bypass OCSP stapling protection and perform a Man-in-the-Middle (MitM) attack.

Successful exploitation of the vulnerability requires that curl is build to use GnuTLS library.

Mitigation

Update the affected package curl to the latest version.

Vulnerable software versions

Ubuntu: 20.04 - 24.04

libcurl4 (Ubuntu package): before 7.81.0-1ubuntu1.18

libcurl3-nss (Ubuntu package): before 7.81.0-1ubuntu1.18

libcurl3-gnutls (Ubuntu package): before 7.81.0-1ubuntu1.18

libcurl4t64 (Ubuntu package): before 8.5.0-2ubuntu10.4

libcurl3t64-gnutls (Ubuntu package): before 8.5.0-2ubuntu10.4

curl (Ubuntu package): before 8.5.0-2ubuntu10.4

CPE2.3

• cpe:2.3:o:canonical:ubuntu:24.04:*:*:*:*:*:*:
• cpe:2.3:o:canonical:ubuntu:22.04:*:*:*:*:*:*:
• cpe:2.3:o:canonical:ubuntu:20.04:*:*:*:*:*:*:

External links

http://ubuntu.com/security/notices/USN-7012-1

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.