CVE-2013-4545

Published: Nov 23, 2013Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

cURL and libcurl 7.18.0 through 7.32.0, when built with OpenSSL, disables the certificate CN and SAN name field verification (CURLOPT_SSL_VERIFYHOST) when the digital signature verification (CURLOPT_SSL_VERIFYPEER) is disabled, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

Affected (68)

Products: Haxx: Curl, Libcurl

Haxx

2 products

Curl

Libcurl

Configuration A

34 vulnerable

Vulnerable Software	Affected Versions
Haxx Curl	Version 7.18.0
Haxx Curl	Version 7.18.1
Haxx Curl	Version 7.18.2
Haxx Curl	Version 7.19.0
Haxx Curl	Version 7.19.1
Haxx Curl	Version 7.19.2
Haxx Curl	Version 7.19.3
Haxx Curl	Version 7.19.4
Haxx Curl	Version 7.19.5
Haxx Curl	Version 7.19.6
Haxx Curl	Version 7.19.7
Haxx Curl	Version 7.20.0
Haxx Curl	Version 7.20.1
Haxx Curl	Version 7.21.0
Haxx Curl	Version 7.21.1
Haxx Curl	Version 7.21.2
Haxx Curl	Version 7.21.3
Haxx Curl	Version 7.21.4
Haxx Curl	Version 7.21.5
Haxx Curl	Version 7.21.6
Haxx Curl	Version 7.21.7
Haxx Curl	Version 7.22.0
Haxx Curl	Version 7.23.0
Haxx Curl	Version 7.23.1
Haxx Curl	Version 7.24.0
Haxx Curl	Version 7.25.0
Haxx Curl	Version 7.26.0
Haxx Curl	Version 7.27.0
Haxx Curl	Version 7.28.0
Haxx Curl	Version 7.28.1
Haxx Curl	Version 7.29.0
Haxx Curl	Version 7.30.0
Haxx Curl	Version 7.31.0
Haxx Curl	Version 7.32.0

Configuration B

34 vulnerable

Vulnerable Software	Affected Versions
Haxx Libcurl	Version 7.18.0
Haxx Libcurl	Version 7.18.1
Haxx Libcurl	Version 7.18.2
Haxx Libcurl	Version 7.19.0
Haxx Libcurl	Version 7.19.1
Haxx Libcurl	Version 7.19.2
Haxx Libcurl	Version 7.19.3
Haxx Libcurl	Version 7.19.4
Haxx Libcurl	Version 7.19.5
Haxx Libcurl	Version 7.19.6
Haxx Libcurl	Version 7.19.7
Haxx Libcurl	Version 7.20.0
Haxx Libcurl	Version 7.20.1
Haxx Libcurl	Version 7.21.0
Haxx Libcurl	Version 7.21.1
Haxx Libcurl	Version 7.21.2
Haxx Libcurl	Version 7.21.3
Haxx Libcurl	Version 7.21.4
Haxx Libcurl	Version 7.21.5
Haxx Libcurl	Version 7.21.6
Haxx Libcurl	Version 7.21.7
Haxx Libcurl	Version 7.22.0
Haxx Libcurl	Version 7.23.0
Haxx Libcurl	Version 7.23.1
Haxx Libcurl	Version 7.24.0
Haxx Libcurl	Version 7.25.0
Haxx Libcurl	Version 7.26.0
Haxx Libcurl	Version 7.27.0
Haxx Libcurl	Version 7.28.0
Haxx Libcurl	Version 7.28.1
Haxx Libcurl	Version 7.29.0
Haxx Libcurl	Version 7.30.0
Haxx Libcurl	Version 7.31.0
Haxx Libcurl	Version 7.32.0