DeutschShown in its original language — a full translation is planned for a future version.
cURL: Mehrere Schwachstellen
view advisory published 2025-02-04
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in cURL ausnutzen, um Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen und um nicht näher bekannte Auswirkungen zu erzielen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-0725US | — | — | ||
When libcurl is asked to perform automatic gzip decompression of
content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option,
**using zlib 1.2.0.3 or older**, an attac… | ||||
| CVE-2025-0665US | — | — | ||
libcurl would wrongly close the same eventfd file descriptor twice when taking
down a connection channel after having completed a threaded name resolve. | ||||
| CVE-2025-0167US | — | — | ||
When asked to use a `.netrc` file for credentials **and** to follow HTTP
redirects, curl could leak the password used for the first host to the
followed-to host under certain circu… | ||||
02
references
External citations — patches, advisories, analysis.
- Splunk Security Advisory SVD-2025-0710 vom 2025-07-07external
- Splunk Security Advisory SVD-2025-1007 vom 2025-10-01external
- Amazon Linux Security Advisory ALAS2ECS-2025-093 vom 2026-01-05external
- Project curl Security Advisory vom 2025-02-04external
- Project curl Security Advisory vom 2025-02-04external
- Project curl Security Advisory vom 2025-02-04external
- Tenable Security Advisory TNS-2025-10 vom 2025-05-22external
- SUSE Security Update SUSE-SU-2025:0372-1 vom 2025-02-06external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan