CVE-2025-4947

A vulnerability was found in curl. When using WolfSSL as the TLS library, it skips the certificate verification for QUIC connections when connecting to a host specified as an IP address in the URL. This can result in curl being unable to detect illegitimate servers or man-in-the-middle attacks, potentially leading to unauthorized connections to malicious hosts or the interception of sensitive communications.

This issue only affects instances of curl and libcurl using WolfSSL as the backend TLS library.

This vulnerability doesn't impact any Red Hat supported curl versions, as Red Hat doesn't ship WolfSSL TLS library in any product.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.