Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jh4h-2cg6-889h

Опубликовано: 08 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 6.3

Описание

When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl, changing TLS options in one thread would inadvertently change them globally and therefore possibly also affect other concurrently setup transfers.

Disabling certificate verification for a specific transfer could unintentionally disable the feature for other threads as well.

When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl, changing TLS options in one thread would inadvertently change them globally and therefore possibly also affect other concurrently setup transfers.

Disabling certificate verification for a specific transfer could unintentionally disable the feature for other threads as well.

EPSS

Процентиль: 0%
0.00007
Низкий

6.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.3
ubuntu
около 1 месяца назад

When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl, changing TLS options in one thread would inadvertently change them globally and therefore possibly also affect other concurrently setup transfers. Disabling certificate verification for a specific transfer could unintentionally disable the feature for other threads as well.

CVSS3: 6.3
nvd
около 1 месяца назад

When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl, changing TLS options in one thread would inadvertently change them globally and therefore possibly also affect other concurrently setup transfers. Disabling certificate verification for a specific transfer could unintentionally disable the feature for other threads as well.

CVSS3: 6.3
debian
около 1 месяца назад

When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl ...

suse-cvrf
19 дней назад

Security update for curl

suse-cvrf
28 дней назад

Security update for curl

EPSS

Процентиль: 0%
0.00007
Низкий

6.3 Medium

CVSS3