← Vulnerability feed

Vulnerability record · CVE-2009-2417 · published 14 August 2009

CVE-2009-2417: Libcurl vulnerability

Curl · Libcurl

lib/ssluse.c in cURL and libcurl 7.4 through 7.19.5, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

7.5 CVSS 2.0 High EPSS 3.5% · top 11.4% CWE-310 · CWE-310
7.5CVSS 2.0 base score
3.5%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
56References
16 Jun 2026Last modified by NVD

Description

lib/ssluse.c in cURL and libcurl 7.4 through 7.19.5, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://curl.haxx.se/CVE-2009-2417/curl-7.10.6-CVE-2009-2417.patch Patch
http://curl.haxx.se/CVE-2009-2417/curl-7.11.0-CVE-2009-2417.patch Patch
http://curl.haxx.se/CVE-2009-2417/curl-7.12.1-CVE-2009-2417.patch Patch
http://curl.haxx.se/CVE-2009-2417/curl-7.15.1-CVE-2009-2417.patch Patch
http://curl.haxx.se/CVE-2009-2417/curl-7.15.5-CVE-2009-2417.patch Patch
http://curl.haxx.se/CVE-2009-2417/curl-7.16.4-CVE-2009-2417.patch PatchVendor Advisory
http://curl.haxx.se/CVE-2009-2417/curl-7.18.1-CVE-2009-2417.patch Patch
http://curl.haxx.se/CVE-2009-2417/curl-7.19.0-CVE-2009-2417.patch Patch
http://curl.haxx.se/CVE-2009-2417/curl-7.19.5-CVE-2009-2417.patch Patch
http://curl.haxx.se/docs/adv_20090812.txt Vendor Advisory
http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html
http://secunia.com/advisories/36238 Vendor Advisory
http://secunia.com/advisories/36475
http://secunia.com/advisories/37471
http://secunia.com/advisories/45047
http://shibboleth.internet2.edu/secadv/secadv_20090817.txt
http://support.apple.com/kb/HT4077
http://wiki.rpath.com/Advisories:rPSA-2009-0124
http://www.securityfocus.com/archive/1/506055/100/0/threaded
http://www.securityfocus.com/archive/1/507985/100/0/threaded
http://www.securityfocus.com/bid/36032
http://www.ubuntu.com/usn/USN-1158-1
http://www.vmware.com/security/advisories/VMSA-2009-0016.html
http://www.vupen.com/english/advisories/2009/2263 Vendor Advisory
http://www.vupen.com/english/advisories/2009/3316
https://exchange.xforce.ibmcloud.com/vulnerabilities/52405
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10114
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8542
http://curl.haxx.se/CVE-2009-2417/curl-7.10.6-CVE-2009-2417.patch Patch
http://curl.haxx.se/CVE-2009-2417/curl-7.11.0-CVE-2009-2417.patch Patch
http://curl.haxx.se/CVE-2009-2417/curl-7.12.1-CVE-2009-2417.patch Patch
http://curl.haxx.se/CVE-2009-2417/curl-7.15.1-CVE-2009-2417.patch Patch
http://curl.haxx.se/CVE-2009-2417/curl-7.15.5-CVE-2009-2417.patch Patch
http://curl.haxx.se/CVE-2009-2417/curl-7.16.4-CVE-2009-2417.patch PatchVendor Advisory
http://curl.haxx.se/CVE-2009-2417/curl-7.18.1-CVE-2009-2417.patch Patch
http://curl.haxx.se/CVE-2009-2417/curl-7.19.0-CVE-2009-2417.patch Patch
http://curl.haxx.se/CVE-2009-2417/curl-7.19.5-CVE-2009-2417.patch Patch
http://curl.haxx.se/docs/adv_20090812.txt Vendor Advisory
http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html
http://secunia.com/advisories/36238 Vendor Advisory

Track CVE-2009-2417 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2012-0036Curl sql injection vulnerabilitycurl and libcurl 7.2x before 7.24.0 do not properly consider special characters during extraction of a pathname from a URL, which allows remote attac…EPSS 16%7.5CVE-2007-3564Libcurl vulnerabilitylibcurl 7.14.0 through 7.16.3, when built with GnuTLS support, does not check SSL/TLS certificate expiration or activation dates, which allows remote…EPSS 2.3%7.5CVE-2005-3185Curl memory buffer overflow vulnerabilityStack-based buffer overflow in the ntlm_output function in http-ntlm.c for (1) wget 1.10, (2) curl 7.13.2, and (3) libcurl 7.13.2, and other products…EPSS 5.2%6.8CVE-2010-0734Libcurl permissions and access controls vulnerabilitycontent_encoding.c in libcurl 7.10.5 through 7.19.7, when zlib is enabled, does not properly restrict the amount of callback data sent to an applicat…EPSS 3.6%6.8CVE-2009-0037Curl cross-site request forgery vulnerabilityThe redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPT_FOLLOWLOCATION is enabled, accepts arbitrary Location values, which…EPSS 9.0%

Source: NIST National Vulnerability Database (record CVE-2009-2417), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.