When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl, changing TLS options in one thread would inadvertently change them globally and therefore possibly also affect other concurrently setup transfers.
Disabling certificate verification for a specific transfer could unintentionally disable the feature for other threads as well.
CVSS Details
- CVSS 3.1 Base Score: 6.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade curl | May 20, 2026 | Jan 8, 2026 |
| Amazon Linux Ami 2 | — | Upgrade curl-debuginfoUpgrade curlUpgrade libcurlUpgrade libcurl-devel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade libcurl-minimal-debuginfoUpgrade libcurl-minimalUpgrade curlUpgrade curl-debugsourceUpgrade curl-minimal-debuginfoUpgrade libcurlUpgrade libcurl-debuginfoUpgrade libcurl-develUpgrade curl-debuginfoUpgrade curl-minimal | Feb 20, 2026 | Jan 8, 2026 |
| Apple Osx Curl | — | Upgrade macOS to the latest version | Sep 16, 2026 | Sep 14, 2026 |
| Freebsd | — | Upgrade mysql96-clientUpgrade mysql80-serverUpgrade mysql84-clientUpgrade mysql84-serverUpgrade mysql80-clientUpgrade mysql96-serverUpgrade curl | May 19, 2026 | May 19, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libcurlUpgrade curl | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade curlUpgrade libcurl | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade curlUpgrade libcurl | Mar 10, 2026 | Mar 10, 2026 |
| Oracle Mysql | — | Upgrade to MySQL version 8.0.46Upgrade to MySQL version 8.4.9Upgrade to MySQL version 9.7.0 | Apr 22, 2026 | Jan 8, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Jan 8, 2026 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.4.14Upgrade Splunk Enterprise to version 10.2.6Upgrade Splunk Enterprise to version 10.4.2Upgrade Splunk Enterprise to version 10.0.9 | Aug 20, 2026 | Jan 8, 2026 |
| Ubuntu | — | Upgrade libcurl4t64Upgrade libcurl3-gnutlsUpgrade curl (Ubuntu Pro)Upgrade libcurl3 (Ubuntu Pro)Upgrade libcurl4-gnutls-devUpgrade libcurl4-nss-devUpgrade libcurl3-nssUpgrade libcurl4Upgrade libcurl4-openssl-devUpgrade libcurl3t64-gnutlsUpgrade curlUpgrade libcurl4 (Ubuntu Pro) | Feb 26, 2026 | Feb 25, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jan 8, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub