---
schema_version: '1.0'
id: security-20260705-ce6cec
url: https://osv.dev/vulnerability/CURL-CVE-2024-8096
url_hash: ce6cecdb834c71bd1ec2b34ffd2481e93faae139b92ed14a1077c82f0801280c
canonical_url: https://osv.dev/vulnerability/CURL-CVE-2024-8096
source: osv:osv
category: security/library
category_raw: cve/library
region: null
tags:
- cve
- CVE-2024-8096
- CURL-CVE-2024-8096
- severity:Medium
- https://github.com/curl/curl
- GIT
lang: en
published_at: '2024-09-11T08:00:00Z'
fetched_at: '2026-07-05T15:34:34Z'
updated_at: '2026-07-05T15:37:03Z'
status: published
content_hash: 1f5b3c321cecbdd302bdab3998bb88ad4b5e2c11588d52247869bb919ac56a14
license_note: full
summary: OCSP stapling bypass with GnuTLS
summary_source: rss
summary_en: OCSP stapling bypass with GnuTLS
entities:
- name: GitHub
  type: organization
- name: guardrail bypass
  type: UNKNOWN
- name: converge with
  type: UNKNOWN
key_facts: []
related: []
related_auto:
- name: Anonymous
  type: organization
  weight: 1.0
- name: AirPods
  type: artifact
  weight: 1.0
- name: Claude Code
  type: artifact
  weight: 1.0
- name: セッション漏洩
  type: event
  weight: 1.0
- name: local-llm
  type: content
  weight: 1.0
title: 'CVE-2024-8096: OCSP stapling bypass with GnuTLS'
---

# CVE-2024-8096: OCSP stapling bypass with GnuTLS

## TL;DR
OCSP stapling bypass with GnuTLS

## Key Points
- cve / CVE-2024-8096 / CURL-CVE-2024-8096 / severity:Medium / https://github.com/curl/curl / GIT

## Details
**Severity:** Medium
**Advisory:** CURL-CVE-2024-8096 (CVE-2024-8096)

**Affected (your watchlist):**
- `GIT:https://github.com/curl/curl` curl-8_9_1 → no fixed version listed [mac]

**Details:**
When curl is told to use the Certificate Status Request TLS extension, often
referred to as OCSP stapling, to verify that the server certificate is valid,
it might fail to detect some OCSP problems and instead wrongly consider the
response as fine.

If the returned status reports another error than "revoked" (like for example
"unauthorized") it is not treated as a bad certificate.

_Data: OSV.dev (upstream: osv) — https://osv.dev/vulnerability/CURL-CVE-2024-8096_

## Source
元記事: [CVE-2024-8096: OCSP stapling bypass with GnuTLS](https://osv.dev/vulnerability/CURL-CVE-2024-8096) — published 2024-09-11T08:00:00Z