CVE-2025-0665

libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve.
References
Configurations

Configuration 1 (hide)

cpe:2.3:a:haxx:curl:8.11.1:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:netapp:bootstrap_os:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*

History

30 Jul 2025, 19:41

Type Values Removed Values Added
References () https://curl.se/docs/CVE-2025-0665.html - () https://curl.se/docs/CVE-2025-0665.html - Vendor Advisory
References () https://curl.se/docs/CVE-2025-0665.json - () https://curl.se/docs/CVE-2025-0665.json - Vendor Advisory
References () https://hackerone.com/reports/2954286 - () https://hackerone.com/reports/2954286 - Exploit, Issue Tracking, Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2025/02/05/2 - () http://www.openwall.com/lists/oss-security/2025/02/05/2 - Mailing List, Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2025/02/05/5 - () http://www.openwall.com/lists/oss-security/2025/02/05/5 - Mailing List, Third Party Advisory
References () https://security.netapp.com/advisory/ntap-20250306-0007/ - () https://security.netapp.com/advisory/ntap-20250306-0007/ - Third Party Advisory
CPE cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:netapp:bootstrap_os:-:*:*:*:*:*:*:*
cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*
cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*
cpe:2.3:a:haxx:curl:8.11.1:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*
cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*
First Time Netapp h410s Firmware
Netapp h300s
Netapp h500s Firmware
Netapp h700s Firmware
Netapp h700s
Netapp h300s Firmware
Netapp bootstrap Os
Netapp h410c Firmware
Haxx
Netapp h500s
Haxx curl
Netapp hci Compute Node
Netapp
Netapp h410s
Netapp h410c

18 Mar 2025, 18:15

Type Values Removed Values Added
CWE CWE-1341
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 9.8

07 Mar 2025, 01:15

Type Values Removed Values Added
References
  • () https://security.netapp.com/advisory/ntap-20250306-0007/ -

18 Feb 2025, 19:15

Type Values Removed Values Added
Summary
  • (es) libcurl cerraría incorrectamente el mismo descriptor de archivo eventfd dos veces al finalizar un canal de conexión después de haber completado una resolución de nombre enhebrado.
CWE CWE-1341
CVSS v2 : unknown
v3 : 9.8
v2 : unknown
v3 : unknown

05 Feb 2025, 20:15

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2025/02/05/5 -

05 Feb 2025, 15:15

Type Values Removed Values Added
CWE CWE-1341
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 9.8

05 Feb 2025, 11:15

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2025/02/05/2 -

05 Feb 2025, 10:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-02-05 10:15

Updated : 2025-07-30 19:41


NVD link : CVE-2025-0665

Mitre link : CVE-2025-0665

CVE.ORG link : CVE-2025-0665


JSON object : View

Products Affected

haxx

  • curl

netapp

  • h410s
  • h500s_firmware
  • h410c
  • h410c_firmware
  • h410s_firmware
  • h700s_firmware
  • hci_compute_node
  • h700s
  • h300s_firmware
  • h300s
  • bootstrap_os
  • h500s
CWE
CWE-1341

Multiple Releases of Same Resource or Handle