A vulnerability, which was classified as problematic, has been found in cURL 8.5.0. This issue affects the function
servercert
of the file lib/vtls/openssl.c of the component OSCP Verification. The manipulation leads to improper check for certificate revocation.
The identification of this vulnerability is CVE-2024-0853. Access to the local network is required for this attack to succeed. There is no exploit available.
It is recommended to upgrade the affected component.