When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl,
changing TLS options in one thread would inadvertently change them globally
and therefore possibly also affect other concurrently setup transfers.
Disabling certificate verification for a specific transfer could
unintentionally disable the feature for other threads as well.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
References
History
Fri, 09 Jan 2026 00:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-1058 | |
| References |
| |
| Metrics |
threat_severity
|
cvssV3_1
|
Thu, 08 Jan 2026 11:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Thu, 08 Jan 2026 10:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl, changing TLS options in one thread would inadvertently change them globally and therefore possibly also affect other concurrently setup transfers. Disabling certificate verification for a specific transfer could unintentionally disable the feature for other threads as well. | |
| Title | broken TLS options for threaded LDAPS | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: curl
Published:
Updated: 2026-01-08T11:05:58.081Z
Reserved: 2025-12-04T11:42:10.538Z
Link: CVE-2025-14017
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2026-01-08T10:15:45.667
Modified: 2026-01-08T18:08:18.457
Link: CVE-2025-14017
Redhat
OpenCVE Enrichment
No data.