CVE-2014-0350: Pocoproject Poco C++ Libraries

Medium severity, CVSS 6.4. EPSS: 1.2% chance of exploitation in the next 30 days.

The Poco::Net::X509Certificate::verify method in the NetSSL library in POCO C++ Libraries before 1.4.6p4 allows man-in-the-middle attackers to spoof SSL servers via crafted DNS PTR records that are requested during comparison of a server name to a wildcard domain name in an X.509 certificate.

Affected products

• Pocoproject Poco C++ Libraries: up to and including 1.4.6; version 1.4.5 only; version 1.4.6 only

Published 2014-04-26. Last modified 2026-06-17.