CVE-2025-0665

EUVD-2025-1809
libcurl would wrongly close the same eventfd file descriptor twice when taking
down a connection channel after having completed a threaded name resolve.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
curlCNA
7 HIGH
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 70.54%
Affected Products (NVD)
VendorProductVersion
haxxcurl
8.11.1
netappbootstrap_os
-
netapph300s_firmware
-
netapph410c_firmware
-
netapph410s_firmware
-
netapph500s_firmware
-
netapph700s_firmware
-
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
SiemensRUGGEDCOM RST2428P
𝑥
< V3.3
ADP
SiemensSCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family
𝑥
< V3.3
ADP
SiemensSCALANCE XCH328
𝑥
< V3.3
ADP
SiemensSCALANCE XCM324
𝑥
< V3.3
ADP
SiemensSCALANCE XCM328
𝑥
< V3.3
ADP
SiemensSCALANCE XCM332
𝑥
< V3.3
ADP
SiemensSCALANCE XRH334 \(24 V DC\, 8xFO\, CC\)
𝑥
< V3.3
ADP
SiemensSCALANCE XRM334 \(230 V AC\, 12xFO\)
𝑥
< V3.3
ADP
SiemensSCALANCE XRM334 \(230 V AC\, 8xFO\)
𝑥
< V3.3
ADP
SiemensSCALANCE XRM334 \(230V AC\, 2x10G\, 24xSFP\, 8xSFP\+\)
𝑥
< V3.3
ADP
SiemensSCALANCE XRM334 \(24 V DC\, 12xFO\)
𝑥
< V3.3
ADP
SiemensSCALANCE XRM334 \(24 V DC\, 8xFO\)
𝑥
< V3.3
ADP
SiemensSCALANCE XRM334 \(24V DC\, 2x10G\, 24xSFP\, 8xSFP\+\)
𝑥
< V3.3
ADP
SiemensSCALANCE XRM334 \(2x230 V AC\, 12xFO\)
𝑥
< V3.3
ADP
SiemensSCALANCE XRM334 \(2x230 V AC\, 8xFO\)
𝑥
< V3.3
ADP
SiemensSCALANCE XRM334 \(2x230V AC\, 2x10G\, 24xSFP\, 8xSFP\+\)
𝑥
< V3.3
ADP
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP
V3.1.0 ≤
𝑥
< V3.1.5
ADP
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
V3.1.0 ≤
𝑥
< V3.1.5
ADP
SiemensSIPLUS S7-1500 CPU 1518-4 PN/DP MFP
V3.1.0 ≤
𝑥
< V3.1.5
ADP
curlcurl
𝑥
≤ 8.11.1
CNA
Debian logo
Debian Releases
Debian Product
Codename
curl
bookworm
7.88.1-10+deb12u15
fixed
bookworm (security)
7.88.1-10+deb12u5
fixed
bullseye
not-affected
forky
8.22.0-1
fixed
sid
8.23.0-1
fixed
trixie
8.14.1-2+deb13u5
fixed
trixie (security)
8.14.1-2+deb13u7
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
curl
bionic
not-affected
focal
not-affected
jammy
not-affected
noble
not-affected
oracular
not-affected
plucky
not-affected
trusty
not-affected
xenial
not-affected
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
curl
suse enterprise desktop 15 SP6
8.14.1-150600.4.28.1
fixed
suse enterprise desktop 15 SP7
8.14.1-150600.4.28.1
fixed
suse enterprise sap 15 SP6
8.14.1-150600.4.28.1
fixed
suse enterprise sap 15 SP7
8.14.1-150600.4.28.1
fixed
suse enterprise server 15 SP6
8.14.1-150600.4.28.1
fixed
suse enterprise server 15 SP7
8.14.1-150600.4.28.1
fixed
libcurl-devel
suse enterprise desktop 15 SP6
8.14.1-150600.4.28.1
fixed
suse enterprise desktop 15 SP7
8.14.1-150600.4.28.1
fixed
suse enterprise sap 15 SP6
8.14.1-150600.4.28.1
fixed
suse enterprise sap 15 SP7
8.14.1-150600.4.28.1
fixed
suse enterprise server 15 SP6
8.14.1-150600.4.28.1
fixed
suse enterprise server 15 SP7
8.14.1-150600.4.28.1
fixed
libcurl4
suse enterprise desktop 15 SP6
8.14.1-150600.4.28.1
fixed
suse enterprise desktop 15 SP7
8.14.1-150600.4.28.1
fixed
suse enterprise sap 15 SP6
8.14.1-150600.4.28.1
fixed
suse enterprise sap 15 SP7
8.14.1-150600.4.28.1
fixed
suse enterprise server 15 SP6
8.14.1-150600.4.28.1
fixed
suse enterprise server 15 SP7
8.14.1-150600.4.28.1
fixed
libcurl4-32bit
suse enterprise desktop 15 SP6
8.14.1-150600.4.28.1
fixed
suse enterprise desktop 15 SP7
8.14.1-150600.4.28.1
fixed
suse enterprise sap 15 SP6
8.14.1-150600.4.28.1
fixed
suse enterprise sap 15 SP7
8.14.1-150600.4.28.1
fixed
suse enterprise server 15 SP6
8.14.1-150600.4.28.1
fixed
suse enterprise server 15 SP7
8.14.1-150600.4.28.1
fixed
Azure Linux logo
Azure Linux Releases
Azure Package
Release
curl
Azure Linux 3.0
0:8.11.1-3.azl3
fixed
References
https://curl.se/docs/CVE-2025-0665.html
https://curl.se/docs/CVE-2025-0665.json
https://hackerone.com/reports/2954286
http://www.openwall.com/lists/oss-security/2025/02/05/2
http://www.openwall.com/lists/oss-security/2025/02/05/5
https://security.netapp.com/advisory/ntap-20250306-0007/
https://cert-portal.siemens.com/productcert/html/ssa-089022.html
https://cert-portal.siemens.com/productcert/html/ssa-398330.html