When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl, changing TLS options in one thread would inadvertently change them globally and therefore possibly also affect other concurrently setup transfers.
Disabling certificate verification for a specific transfer could unintentionally disable the feature for other threads as well.
CVSS Details
- CVSS 3.1 Base Score: 6.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade curl | May 20, 2026 | Jan 8, 2026 |
| Amazon Linux Ami 2 | — | Upgrade curl-debuginfoUpgrade curlUpgrade libcurl-develUpgrade libcurl | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade libcurlUpgrade curl-debuginfoUpgrade curl-minimal-debuginfoUpgrade libcurl-develUpgrade libcurl-debuginfoUpgrade curl-minimalUpgrade libcurl-minimal-debuginfoUpgrade curlUpgrade curl-debugsourceUpgrade libcurl-minimal | Feb 20, 2026 | Jan 8, 2026 |
| Apple Osx Curl | — | Upgrade macOS to the latest version | Sep 16, 2026 | Sep 14, 2026 |
| Freebsd | — | Upgrade mysql80-serverUpgrade mysql84-clientUpgrade mysql96-clientUpgrade mysql84-serverUpgrade curlUpgrade mysql80-clientUpgrade mysql96-server | May 19, 2026 | May 19, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade curlUpgrade libcurl | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade libcurlUpgrade curl | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade libcurlUpgrade curl | Mar 10, 2026 | Mar 10, 2026 |
| Oracle Mysql | — | Upgrade to MySQL version 8.4.9Upgrade to MySQL version 9.7.0Upgrade to MySQL version 8.0.46 | Apr 22, 2026 | Jan 8, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Jan 8, 2026 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.0.9Upgrade Splunk Enterprise to version 10.4.2Upgrade Splunk Enterprise to version 10.2.6Upgrade Splunk Enterprise to version 9.4.14 | Aug 20, 2026 | Jan 8, 2026 |
| Ubuntu | — | Upgrade libcurl3t64-gnutlsUpgrade libcurl4-nss-devUpgrade libcurl4Upgrade libcurl3-nssUpgrade curlUpgrade libcurl4-openssl-devUpgrade libcurl4 (Ubuntu Pro)Upgrade libcurl3 (Ubuntu Pro)Upgrade libcurl4t64Upgrade libcurl3-gnutlsUpgrade curl (Ubuntu Pro)Upgrade libcurl4-gnutls-dev | Feb 26, 2026 | Feb 25, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jan 8, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub