CVE-2007-3564
libcurl 7.14.0 through 7.16.3, when built with GnuTLS support, does not check SSL/TLS certificate...
CVE-2007-3564 is a high vulnerability (CVSS 7.5) in Libcurl, published July 10, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.30%, the 83rd percentile. Fixed in curl 7.16.4-1.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 2.30%EPSS, 83rd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
7.16.4-1curl +3 more
Description
libcurl 7.14.0 through 7.16.3, when built with GnuTLS support, does not check SSL/TLS certificate expiration or activation dates, which allows remote attackers to bypass certain access restrictions.
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
libcurl 7.14.0 through 7.16.3, when built with GnuTLS support, does not check SSL/TLS certificate expiration or activation dates, which allows remote attackers to bypass certain access restrictions.
- Record
CVE-2007-3564- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
libcurl 7.14.0 through 7.16.3, when built with GnuTLS support, does not check SSL/TLS certificate expiration or activation dates, which allows remote attackers to bypass certain access restrictions.
- Record
CVE-2007-3564- Updated
- 2026-11-02
EUVDEUVD-2007-3548No score
libcurl 7.14.0 through 7.16.3, when built with GnuTLS support, does not check SSL/TLS certificate expiration or activation dates, which allows remote attackers to bypass certain access restrictions.
- Record
EUVD-2007-3548- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-83vp-5vg4-r3g7No score
libcurl 7.14.0 through 7.16.3, when built with GnuTLS support, does not check SSL/TLS certificate...
libcurl 7.14.0 through 7.16.3, when built with GnuTLS support, does not check SSL/TLS certificate expiration or activation dates, which allows remote attackers to bypass certain access restrictions.
- Record
GHSA-83vp-5vg4-r3g7- Updated
- 2026-11-02
OSVCURL-CVE-2007-3564No score
GnuTLS insufficient cert verification
libcurl (when built to use GnuTLS) fails to verify that a peer's certificate has not already expired or has not yet become valid. This allows malicious servers to present certificates to libcurl that were not rejected properly.
Notably, the CA certificate and common name checks are still in place which reduces the risk for random servers to take advantage of this flaw.
- Record
CURL-CVE-2007-3564- Updated
- 2026-11-02
OSVNo score
libcurl 7.14.0 through 7.16.3, when built with GnuTLS support, does not check SSL/TLS certificate expiration or activation dates, which allows remote attackers to bypass certain access restrictions.
- Record
CVE-2007-3564- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-3564No score
libcurl 7.14.0 through 7.16.3, when built with GnuTLS support, does not check SSL/TLS certificate expiration or activation dates, which allows remote attackers to bypass certain access restrictions.
- Record
DEBIAN-CVE-2007-3564- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| affected, aliases, facts, published, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.