Contact us
Vulnerability lookup

CVE-2025-14017

medium CVSS 6.3 EPSS 0.1%

When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl, changing TLS options in one thread would inadvertently change them globally and therefore possibly also affect other concurrently setup transfers. Disabling certificate verification for a specific transfer could unintentionally disable the feature for other threads as well.

Versions it affects

Software versions checked with the free lookup that CVE-2025-14017 applies to, and the release that fixes it where the sources name one.

At a glance

Severity
Medium
CVSS base score
6.3 out of 10
Known exploited
Not in CISA's catalogue of exploited vulnerabilities
EPSS
0.1% probability of exploitation in the next 30 days, higher than 1% of scored vulnerabilities
Weakness
CWE-567
Published
2026-01-08

Is this running somewhere in your estate?

The Vulnerability Reporter inventories every machine and tells you when an advisory like this one applies to you.