PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›Document archive›CVE-2016-3739

CVE-2016-3739

curl: TLS certificate name check bypass with mbedTLS and PolarSSL

Loading…

Severity

Moderate

Red Hat Product Security

4

CVSS 2.0

Review impact separately from score.

Published · May 18, 2016

Updated · August 5, 2026

Description

The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) polarssl_connect_step1 function in lib/vtls/polarssl.c in cURL and libcurl before 7.49.0, when using SSLv3 or making a TLS connection to a URL that uses a numerical IP address, allow remote attackers to spoof servers via an arbitrary valid certificate.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 2.0 · 4
AV:N/AC:H/Au:N/C:P/I:P/A:N

CWE-345 · Insufficient Verification of Data Authenticity