CVE-2017-7468: haxx libcurl Improper Certificate Validation
Vulnerability summary
CVE-2017-7468 is a high (CVSS 7.5) Improper Certificate Validation vulnerability in haxx libcurl. EPSS estimates a 1.65% chance of exploitation in the next 30 days, higher than 76.1% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 1 · Related 1Timeline
- 16-07-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
In curl and libcurl 7.52.0 to and including 7.53.1, libcurl would attempt to resume a TLS session even if the client certificate had changed. That is unacceptable since a server by specification is allowed to skip the client certificate check on resume, and may instead use the old identity which was established by the previous certificate (or no certificate). libcurl supports by default the use of TLS session id/ticket to resume previous TLS sessions to speed up subsequent TLS handshakes. They are used when for any reason an existing TLS connection couldn't be kept alive to make the next handshake faster. This flaw is a regression and identical to CVE-2016-5419 reported on August 3rd 2016, but affecting a different version range.
CVSS metrics
5 scores · 4 sources · 2 versions- CVE.orgCNA4.8MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:NDiffers
- OSV · AlpineEcosystem advisory · calculated7.5HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- OSV · DebianEcosystem advisory · calculated7.5HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS trend
Probability
1.65%
Chance of exploitation in the next 30 days
Percentile
76%
Versus all other CVEs
30-day change
0.00 pp
From 1.65% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
[unknown]1 product
- curlcurl 7.54.0
Alpine1 product
- curl< 7.54.0-r0 | < 7.52.1-r1 | < 7.52.1-r2 | < 7.52.1-r3
Debian1 product
- curl< 7.52.1-5
Haxx1 product
- libcurl≥ 7.52.0, ≤ 7.53.1
4 vendors · 4 products
References
7 links- bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7468X Refsource CONFIRMIssue TrackingThird Party Advisory
