Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2025-14819

Опубликовано: 10 янв. 2026
Источник: msrc
CVSS3: 5.3
EPSS Низкий

Описание

OpenSSL partial chain store policy bypass

EPSS

Процентиль: 55%
0.00756
Низкий

5.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.3
ubuntu
10 месяцев назад

When doing TLS related transfers with reused easy or multi handles and altering the `CURLSSLOPT_NO_PARTIALCHAIN` option, libcurl could accidentally reuse a CA store cached in memory for which the partial chain option was reversed. Contrary to the user's wishes and expectations. This could make libcurl find and accept a trust chain that it otherwise would not.

CVSS3: 6.8
redhat
10 месяцев назад

When doing TLS related transfers with reused easy or multi handles and altering the `CURLSSLOPT_NO_PARTIALCHAIN` option, libcurl could accidentally reuse a CA store cached in memory for which the partial chain option was reversed. Contrary to the user's wishes and expectations. This could make libcurl find and accept a trust chain that it otherwise would not.

CVSS3: 5.3
nvd
10 месяцев назад

When doing TLS related transfers with reused easy or multi handles and altering the `CURLSSLOPT_NO_PARTIALCHAIN` option, libcurl could accidentally reuse a CA store cached in memory for which the partial chain option was reversed. Contrary to the user's wishes and expectations. This could make libcurl find and accept a trust chain that it otherwise would not.

CVSS3: 5.3
debian
10 месяцев назад

When doing TLS related transfers with reused easy or multi handles and ...

CVSS3: 5.3
redos
9 месяцев назад

Уязвимость curl

EPSS

Процентиль: 55%
0.00756
Низкий

5.3 Medium

CVSS3