CVE-2017-2629

CVE-2017-2629 describes a flaw in curl versions prior to 7.53.0, where an incorrect TLS Certificate Status Request extension implementation always reported valid proof of a server's certificate, even when absent or unsupported. This could mislead users about a server's certificate validity, affecting both the curl library and command-line tool. Rated 6.5 MEDIUM, this vulnerability has a network attack vector and low attack complexity, potentially leading to high integrity impact by misrepresenting server security. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.