https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 03:14:40 +0000 https://vulnerability.circl.lu/vuln/cve-2017-2629 <p><strong>Affected:</strong> curl</p> <p>curl before 7.53.0 has an incorrect TLS Certificate Status Request extension feature that asks for a fresh proof of the server&#39;s certificate&#39;s validity in the code that checks for a test success or failure. It ends up always thinking there&#39;s valid proof, even when there is none or if the server doesn&#39;t support the TLS extension in question. This could lead to users not detecting when a server&#39;s certificate goes invalid or otherwise be mislead that the server is in a better shape than it is in reality. This flaw also exists in the command line tool (--cert-status).</p> <p><strong>Affected:</strong> curl</p> <p>curl before 7.53.0 has an incorrect TLS Certificate Status Request extension feature that asks for a fresh proof of the server&#39;s certificate&#39;s validity in the code that checks for a test success or failure. It ends up always thinking there&#39;s valid proof, even when there is none or if the server doesn&#39;t support the TLS extension in question. This could lead to users not detecting when a server&#39;s certificate goes invalid or otherwise be mislead that the server is in a better shape than it is in reality. This flaw also exists in the command line tool (--cert-status).</p> https://vulnerability.circl.lu/vuln/cve-2017-2629