icon

We found results for “

CVE-2025-14017

Good to know:

icon
icon

Date: January 8, 2026

In curl 7.17.0 to and including 8.17.0, when doing multithreaded LDAPS transfers (LDAP over TLS) with libcurl, changing TLS options in one thread would inadvertently change them globally and therefore possibly also affect other concurrently setup transfers. Disabling certificate verification for a specific transfer could unintentionally disable the feature for other threads as well.

Severity Score

Severity Score

Top Fix

icon

Upgrade Version

Upgrade to version https://github.com/curl/curl.git - curl-8_18_0

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): LOW

Do you need more information?

Contact Us