VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 23, 2013· Updated Jun 17, 2026

CVE-2013-6422

CVE-2013-6422

Description

The GnuTLS backend in libcurl 7.21.4 through 7.33.0, when disabling digital signature verification (CURLOPT_SSL_VERIFYPEER), also disables the CURLOPT_SSL_VERIFYHOST check for CN or SAN host name fields, which makes it easier for remote attackers to spoof servers and conduct man-in-the-middle (MITM) attacks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

24
  • Curl/Libcurl18 versions
    cpe:2.3:a:haxx:libcurl:7.21.4:*:*:*:*:*:*:*+ 17 more
    • cpe:2.3:a:haxx:libcurl:7.21.4:*:*:*:*:*:*:*
    • cpe:2.3:a:haxx:libcurl:7.21.5:*:*:*:*:*:*:*
    • cpe:2.3:a:haxx:libcurl:7.21.6:*:*:*:*:*:*:*
    • cpe:2.3:a:haxx:libcurl:7.21.7:*:*:*:*:*:*:*
    • cpe:2.3:a:haxx:libcurl:7.22.0:*:*:*:*:*:*:*
    • cpe:2.3:a:haxx:libcurl:7.23.0:*:*:*:*:*:*:*
    • cpe:2.3:a:haxx:libcurl:7.23.1:*:*:*:*:*:*:*
    • cpe:2.3:a:haxx:libcurl:7.24.0:*:*:*:*:*:*:*
    • cpe:2.3:a:haxx:libcurl:7.25.0:*:*:*:*:*:*:*
    • cpe:2.3:a:haxx:libcurl:7.26.0:*:*:*:*:*:*:*
    • cpe:2.3:a:haxx:libcurl:7.27.0:*:*:*:*:*:*:*
    • cpe:2.3:a:haxx:libcurl:7.28.0:*:*:*:*:*:*:*
    • cpe:2.3:a:haxx:libcurl:7.28.1:*:*:*:*:*:*:*
    • cpe:2.3:a:haxx:libcurl:7.29.0:*:*:*:*:*:*:*
    • cpe:2.3:a:haxx:libcurl:7.30.0:*:*:*:*:*:*:*
    • cpe:2.3:a:haxx:libcurl:7.31.0:*:*:*:*:*:*:*
    • cpe:2.3:a:haxx:libcurl:7.32.0:*:*:*:*:*:*:*
    • cpe:2.3:a:haxx:libcurl:7.33.0:*:*:*:*:*:*:*
  • Canonical/Ubuntu Linux4 versions
    cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*+ 3 more
    • cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:13.04:*:*:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*
  • Debian/linux
    cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
  • Curl/Curlllm-fuzzy
    Range: 7.21.4 through 7.33.0

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.