CVE-2024-2379: QUIC certificate check bypass with wolfSSL
该报告还没有中文解读。
原文摘录
摘自原文（4447 字符中的一小部分）
Summary: In `vquic-tls.c` `curl_wssl_init_ctx` errors are handled by `goto out` and having `result` be set to an error code to be returned. At the beginning of the function `result` is correctly set to `CURLE_FAILED_INIT` which allows for `goto out` to work correctly without having to set `result` …
原文中的代码
./curl -v --http3-only 'https://example.com/' -o /dev/null -s --resolve example.com:443:192.168.1.24 --curves blah * Added example.com:443:192.168.1.24 to DNS cache * Hostname example.com was found in DNS cache * Trying 192.168.1.24:443... * wolfSSL failed to set curves * Verified certificate …
默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 curl 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @fullmetal5 · 版权归作者与 curl 所有