Поиск уязвимостей
Количество 15
Количество 15
CVE-2025-14819
When doing TLS related transfers with reused easy or multi handles and altering the `CURLSSLOPT_NO_PARTIALCHAIN` option, libcurl could accidentally reuse a CA store cached in memory for which the partial chain option was reversed. Contrary to the user's wishes and expectations. This could make libcurl find and accept a trust chain that it otherwise would not.
CVE-2025-14819
When doing TLS related transfers with reused easy or multi handles and altering the `CURLSSLOPT_NO_PARTIALCHAIN` option, libcurl could accidentally reuse a CA store cached in memory for which the partial chain option was reversed. Contrary to the user's wishes and expectations. This could make libcurl find and accept a trust chain that it otherwise would not.
CVE-2025-14819
When doing TLS related transfers with reused easy or multi handles and altering the `CURLSSLOPT_NO_PARTIALCHAIN` option, libcurl could accidentally reuse a CA store cached in memory for which the partial chain option was reversed. Contrary to the user's wishes and expectations. This could make libcurl find and accept a trust chain that it otherwise would not.
CVE-2025-14819
OpenSSL partial chain store policy bypass
CVE-2025-14819
When doing TLS related transfers with reused easy or multi handles and ...
ROS-20260224-80-0043
Уязвимость curl
GHSA-vqhr-m87q-9jqh
When doing TLS related transfers with reused easy or multi handles and altering the `CURLSSLOPT_NO_PARTIALCHAIN` option, libcurl could accidentally reuse a CA store cached in memory for which the partial chain option was reversed. Contrary to the user's wishes and expectations. This could make libcurl find and accept a trust chain that it otherwise would not.
BDU:2026-06682
Уязвимость программного средства для взаимодействия с серверами CURL, позволяющая нарушителю получить доступ к конфиденциальным данным
SUSE-SU-2026:0066-1
Security update for curl
SUSE-SU-2026:0052-1
Security update for curl
SUSE-SU-2026:0050-1
Security update for curl
openSUSE-SU-2026:20031-1
Security update for curl
ELSA-2026-55450
ELSA-2026-55450: curl security update (IMPORTANT)
ALT-PU-2026-1135
ALT-PU-2026-1135: package `curl` update to version 8.18.0-alt1
ALT-PU-2026-18300
ALT-PU-2026-18300: package `libcurl4-openssl` update to version 8.22.0-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-14819 When doing TLS related transfers with reused easy or multi handles and altering the `CURLSSLOPT_NO_PARTIALCHAIN` option, libcurl could accidentally reuse a CA store cached in memory for which the partial chain option was reversed. Contrary to the user's wishes and expectations. This could make libcurl find and accept a trust chain that it otherwise would not. | CVSS3: 5.3 | 1% Низкий | 10 месяцев назад |
 | CVE-2025-14819 When doing TLS related transfers with reused easy or multi handles and altering the `CURLSSLOPT_NO_PARTIALCHAIN` option, libcurl could accidentally reuse a CA store cached in memory for which the partial chain option was reversed. Contrary to the user's wishes and expectations. This could make libcurl find and accept a trust chain that it otherwise would not. | CVSS3: 6.8 | 1% Низкий | 10 месяцев назад |
 | CVE-2025-14819 When doing TLS related transfers with reused easy or multi handles and altering the `CURLSSLOPT_NO_PARTIALCHAIN` option, libcurl could accidentally reuse a CA store cached in memory for which the partial chain option was reversed. Contrary to the user's wishes and expectations. This could make libcurl find and accept a trust chain that it otherwise would not. | CVSS3: 5.3 | 1% Низкий | 10 месяцев назад |
 | CVE-2025-14819 OpenSSL partial chain store policy bypass | 1% Низкий | 10 месяцев назад | |
| CVE-2025-14819 When doing TLS related transfers with reused easy or multi handles and ... | CVSS3: 5.3 | 1% Низкий | 10 месяцев назад |
 | ROS-20260224-80-0043 Уязвимость curl | CVSS3: 5.3 | 1% Низкий | 9 месяцев назад |
| GHSA-vqhr-m87q-9jqh When doing TLS related transfers with reused easy or multi handles and altering the `CURLSSLOPT_NO_PARTIALCHAIN` option, libcurl could accidentally reuse a CA store cached in memory for which the partial chain option was reversed. Contrary to the user's wishes and expectations. This could make libcurl find and accept a trust chain that it otherwise would not. | CVSS3: 5.3 | 1% Низкий | 10 месяцев назад |
 | BDU:2026-06682 Уязвимость программного средства для взаимодействия с серверами CURL, позволяющая нарушителю получить доступ к конфиденциальным данным | CVSS3: 5.3 | 1% Низкий | 11 месяцев назад |
 | SUSE-SU-2026:0066-1 Security update for curl | 10 месяцев назад | ||
| SUSE-SU-2026:0052-1 Security update for curl | 10 месяцев назад | ||
| SUSE-SU-2026:0050-1 Security update for curl | 10 месяцев назад | ||
| openSUSE-SU-2026:20031-1 Security update for curl | 10 месяцев назад | ||
| ELSA-2026-55450 ELSA-2026-55450: curl security update (IMPORTANT) | 3 месяца назад | ||
| ALT-PU-2026-1135 ALT-PU-2026-1135: package `curl` update to version 8.18.0-alt1 | CVSS3: 6.5 | 10 месяцев назад | |
| ALT-PU-2026-18300 ALT-PU-2026-18300: package `libcurl4-openssl` update to version 8.22.0-alt1 | CVSS3: 9.8 | 26 дней назад |
Уязвимостей на страницу