CVE-2025-0665

libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve.
CVSS

No CVSS.

References
Configurations

Configuration 1 (hide)

cpe:2.3:a:haxx:curl:8.11.1:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:netapp:bootstrap_os:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*

History

30 Jul 2025, 19:41

Type Values Removed Values Added
CPE cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*
cpe:2.3:a:haxx:curl:8.11.1:*:*:*:*:*:*:*
cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*
cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*
cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*
cpe:2.3:o:netapp:bootstrap_os:-:*:*:*:*:*:*:*
References () https://curl.se/docs/CVE-2025-0665.html - () https://curl.se/docs/CVE-2025-0665.html - Vendor Advisory
References () https://security.netapp.com/advisory/ntap-20250306-0007/ - () https://security.netapp.com/advisory/ntap-20250306-0007/ - Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2025/02/05/5 - () http://www.openwall.com/lists/oss-security/2025/02/05/5 - Mailing List, Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2025/02/05/2 - () http://www.openwall.com/lists/oss-security/2025/02/05/2 - Mailing List, Third Party Advisory
References () https://curl.se/docs/CVE-2025-0665.json - () https://curl.se/docs/CVE-2025-0665.json - Vendor Advisory
References () https://hackerone.com/reports/2954286 - () https://hackerone.com/reports/2954286 - Exploit, Issue Tracking, Third Party Advisory
First Time Netapp h410s Firmware
Netapp h700s Firmware
Haxx
Netapp h410c Firmware
Netapp h300s Firmware
Haxx curl
Netapp hci Compute Node
Netapp h300s
Netapp
Netapp h410c
Netapp h410s
Netapp h500s
Netapp h500s Firmware
Netapp h700s
Netapp bootstrap Os

07 Mar 2025, 01:15

Type Values Removed Values Added
References
  • () https://security.netapp.com/advisory/ntap-20250306-0007/ -

05 Feb 2025, 20:15

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2025/02/05/5 -

05 Feb 2025, 11:15

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2025/02/05/2 -

05 Feb 2025, 10:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-02-05 10:15

Updated : 2025-07-30 19:41


NVD link : CVE-2025-0665

Mitre link : CVE-2025-0665


JSON object : View

Products Affected

netapp

  • h410s
  • h500s
  • bootstrap_os
  • h410c_firmware
  • h300s
  • h410s_firmware
  • h410c
  • h500s_firmware
  • h700s_firmware
  • h700s
  • h300s_firmware
  • hci_compute_node

haxx

  • curl
CWE

No CWE.