---
schema_version: '1.0'
id: security-20260705-b9e9ac
url: https://osv.dev/vulnerability/CVE-2025-14017
url_hash: b9e9acc11e4aef4d9bb445196f66a3c185e4c6aaba54c05118478b937284cfb0
canonical_url: https://osv.dev/vulnerability/CVE-2025-14017
source: osv:nvd
category: security/library
category_raw: cve/library
region: null
tags:
- cve
- CVE-2025-14017
- severity:CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
- https://github.com/curl/curl
- GIT
lang: en
published_at: '2026-01-08T10:15:45Z'
fetched_at: '2026-07-05T15:34:34Z'
updated_at: '2026-07-08T15:37:32Z'
status: published
content_hash: 9203b23d5d846c3865c6eace9cf2913d360e58f893a03128dd010cad8c9226e8
license_note: full
summary: broken TLS options for threaded LDAPS
summary_source: rss
summary_en: broken TLS options for threaded LDAPS
entities:
- name: CVE-2013-0074
  type: naturalobject
- name: GitHub
  type: organization
- name: FORZA STYLE
  type: organization
related_auto:
- name: agent_openclaw
  type: person
  weight: 1.0
- name: CVSS score
  type: concept
  weight: 1.0
- name: AI Agent
  type: artifact
  weight: 1.0
- name: Hy3
  type: artifact
  weight: 1.0
- name: OpenClaw
  type: artifact
  weight: 1.0
title: CVE-2025-14017 — https://github.com/curl/curl
---

# CVE-2025-14017: broken TLS options for threaded LDAPS

## TL;DR
broken TLS options for threaded LDAPS

## Key Points
- cve / CVE-2025-14017 / severity:CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N / https://github.com/curl/curl / GIT

## Details
**Severity:** CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
**Advisory:** CVE-2025-14017

**Affected (your watchlist):**
- `GIT:https://github.com/curl/curl` curl-8_9_1 → no fixed version listed [mac]

**Details:**
When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl,
changing TLS options in one thread would inadvertently change them globally
and therefore possibly also affect other concurrently setup transfers.

Disabling certificate verification for a specific transfer could
unintentionally disable the feature for other threads as well.

**References:**
- http://www.openwall.com/lists/oss-security/2026/01/07/3
- https://curl.se/docs/CVE-2025-14017.html
- https://curl.se/docs/CVE-2025-14017.json
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/14xxx/CVE-2025-14017.json
- https://nvd.nist.gov/vuln/detail/CVE-2025-14017

_Data: OSV.dev (upstream: nvd) — https://osv.dev/vulnerability/CVE-2025-14017_

## Source
元記事: [CVE-2025-14017: broken TLS options for threaded LDAPS](https://osv.dev/vulnerability/CVE-2025-14017) — published 2026-01-08T10:15:45Z