CVE-2007-3564: Libcurl

High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days.

libcurl 7.14.0 through 7.16.3, when built with GnuTLS support, does not check SSL/TLS certificate expiration or activation dates, which allows remote attackers to bypass certain access restrictions.

Affected products

• Libcurl Libcurl: version 7.14 only; version 7.14.1 only; version 7.15 only; version 7.15.1 only; version 7.15.2 only; version 7.15.3 only; …

Published 2007-07-18. Last modified 2026-06-16.