All vulnerabilities

Servers and applications

CVE-2025-14017

When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl, changing TLS options in one thread would inadvertently change them globally and therefore possibly also affect other concurrently setup transfers. Disabling certificate verification for a specific transfer could unintentionally disable the feature for other threads as well.

Severity
Medium 6.3
Published
8 Jan 2026
Last changed
15 Sept 2026
Added to UpHeron
21 Oct 2026
Fixed in
8.18.0
Sources
NVD

Affected software

SoftwareAffected versions
curlServers and applications · cpe:a:haxx:curl
  • From 7.17.0 before 8.18.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-14017
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-14017