Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2025-14017

broken TLS options for threaded LDAPS

Description

When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl, changing TLS options in one thread would inadvertently change them globally and therefore possibly also affect other concurrently setup transfers. Disabling certificate verification for a specific transfer could unintentionally disable the feature for other threads as well.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

curl curl

Default version status: unaffected

  • 7.17.0 to < 8.14.2affected
  • 8.15.0 to < 8.16.1affected
  • 8.17.0 to < 8.18.0affected

curl curl

Default version status: unaffected

  • ccba0d10b6baf5c73cae8cf4fb3f29f0f55c5a34 to < 39d1976b7f709a516e3243338ebc0443bdd8d56daffected

curl curl

Default version status: unaffected

  • 8.17.0affected
  • 8.16.0affected
  • 8.15.0affected
  • 8.14.1affected
  • 8.14.0affected
  • 8.13.0affected
  • 8.12.1affected
  • 8.12.0affected
  • 8.11.1affected
  • 8.11.0affected
  • 8.10.1affected
  • 8.10.0affected
  • 8.9.1affected
  • 8.9.0affected
  • 8.8.0affected
  • 8.7.1affected
  • 8.7.0affected
  • 8.6.0affected
  • 8.5.0affected
  • 8.4.0affected
  • 8.3.0affected
  • 8.2.1affected
  • 8.2.0affected
  • 8.1.2affected
  • 8.1.1affected
  • 8.1.0affected
  • 8.0.1affected
  • 8.0.0affected
  • 7.88.1affected
  • 7.88.0affected
  • 7.87.0affected
  • 7.86.0affected
  • 7.85.0affected
  • 7.84.0affected
  • 7.83.1affected
  • 7.83.0affected
  • 7.82.0affected
  • 7.81.0affected
  • 7.80.0affected
  • 7.79.1affected
  • 7.79.0affected
  • 7.78.0affected
  • 7.77.0affected
  • 7.76.1affected
  • 7.76.0affected
  • 7.75.0affected
  • 7.74.0affected
  • 7.73.0affected
  • 7.72.0affected
  • 7.71.1affected
  • 7.71.0affected
  • 7.70.0affected
  • 7.69.1affected
  • 7.69.0affected
  • 7.68.0affected
  • 7.67.0affected
  • 7.66.0affected
  • 7.65.3affected
  • 7.65.2affected
  • 7.65.1affected
  • 7.65.0affected
  • 7.64.1affected
  • 7.64.0affected
  • 7.63.0affected
  • 7.62.0affected
  • 7.61.1affected
  • 7.61.0affected
  • 7.60.0affected
  • 7.59.0affected
  • 7.58.0affected
  • 7.57.0affected
  • 7.56.1affected
  • 7.56.0affected
  • 7.55.1affected
  • 7.55.0affected
  • 7.54.1affected
  • 7.54.0affected
  • 7.53.1affected
  • 7.53.0affected
  • 7.52.1affected
  • 7.52.0affected
  • 7.51.0affected
  • 7.50.3affected
  • 7.50.2affected
  • 7.50.1affected
  • 7.50.0affected
  • 7.49.1affected
  • 7.49.0affected
  • 7.48.0affected
  • 7.47.1affected
  • 7.47.0affected
  • 7.46.0affected
  • 7.45.0affected
  • 7.44.0affected
  • 7.43.0affected
  • 7.42.1affected
  • 7.42.0affected
  • 7.41.0affected
  • 7.40.0affected
  • 7.39.0affected
  • 7.38.0affected
  • 7.37.1affected
  • 7.37.0affected
  • 7.36.0affected
  • 7.35.0affected
  • 7.34.0affected
  • 7.33.0affected
  • 7.32.0affected
  • 7.31.0affected
  • 7.30.0affected
  • 7.29.0affected
  • 7.28.1affected
  • 7.28.0affected
  • 7.27.0affected
  • 7.26.0affected
  • 7.25.0affected
  • 7.24.0affected
  • 7.23.1affected
  • 7.23.0affected
  • 7.22.0affected
  • 7.21.7affected
  • 7.21.6affected
  • 7.21.5affected
  • 7.21.4affected
  • 7.21.3affected
  • 7.21.2affected
  • 7.21.1affected
  • 7.21.0affected
  • 7.20.1affected
  • 7.20.0affected
  • 7.19.7affected
  • 7.19.6affected
  • 7.19.5affected
  • 7.19.4affected
  • 7.19.3affected
  • 7.19.2affected
  • 7.19.1affected
  • 7.19.0affected
  • 7.18.2affected
  • 7.18.1affected
  • 7.18.0affected
  • 7.17.1affected
  • 7.17.0affected

References