Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2026-11564

Опубликовано: 03 июл. 2026
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS3: 9.1

Описание

libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. An easy handle that first uses default native CA trust can continue trusting the native platform store after the application switches that same handle to custom CA material for a later transfer.

РелизСтатусПримечание
devel

pending

8.20.0-2ubuntu4
esm-infra-legacy/trusty

not-affected

code not present
esm-infra-legacy/xenial

not-affected

code not present
esm-infra/bionic

not-affected

code not present
esm-infra/focal

not-affected

code not present
jammy

not-affected

code not present
noble

not-affected

code not present
questing

not-affected

code not present
resolute

released

8.18.0-1ubuntu2.3
upstream

pending

8.21.0

Показывать по

EPSS

Процентиль: 30%
0.00363
Низкий

9.1 Critical

CVSS3

Связанные уязвимости

CVSS3: 6.5
redhat
3 месяца назад

libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. An easy handle that first uses default native CA trust can continue trusting the native platform store after the application switches that same handle to custom CA material for a later transfer.

CVSS3: 9.1
nvd
3 месяца назад

libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. An easy handle that first uses default native CA trust can continue trusting the native platform store after the application switches that same handle to custom CA material for a later transfer.

msrc
около 1 месяца назад

Native CA trust persist

CVSS3: 9.1
debian
3 месяца назад

libcurl keeps previously used connections in a connection pool for sub ...

CVSS3: 9.1
github
3 месяца назад

libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. An easy handle that first uses default native CA trust can continue trusting the native platform store after the application switches that same handle to custom CA material for a later transfer.

EPSS

Процентиль: 30%
0.00363
Низкий

9.1 Critical

CVSS3