CVE-2007-3564: High severity libcurl libcurl vulnerability
libcurl 7.14.0 through 7.16.3, when built with GnuTLS support, does not check SSL/TLS certificate expiration or activation dates, which allows remote attackers to bypass certain access restrictions.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-3564?
The severity of CVE-2007-3564 is considered moderate, as it allows remote attackers to bypass SSL/TLS certificate checks.
How do I fix CVE-2007-3564?
To fix CVE-2007-3564, upgrade to libcurl version 7.16.4 or later, which addresses the certificate expiration and activation date issue.
Which versions of libcurl are affected by CVE-2007-3564?
Affected versions of libcurl include 7.14.0 through 7.16.3 when built with GnuTLS support.
What does CVE-2007-3564 exploit in libcurl?
CVE-2007-3564 exploits the lack of checks for SSL/TLS certificate expiration and activation dates in certain libcurl releases.
Is CVE-2007-3564 a client-side or server-side vulnerability?
CVE-2007-3564 is primarily a client-side vulnerability affecting applications that use the vulnerable versions of libcurl.