CVE-2025-0665

🗓️ 05 Feb 2025 10:15:22Reported by AttackerKBType

libcurl may double close an eventfd when tearing down a connection channel after threaded name resolve.

Reporter	Title	Published	Views	Family All 64
AlpineLinux	CVE-2025-0665	5 Feb 202509:16	–	alpinelinux
Tenable Nessus	Azure Linux 3.0 Security Update: curl / mysql (CVE-2025-0665)	11 Jul 202500:00	–	nessus
Tenable Nessus	Curl < 8.12.0 Double Close (CVE-2025-0665)	10 Feb 202500:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: curl / mysql (CVE-2025-0665)	11 Jul 202500:00	–	nessus
Tenable Nessus	Tenable Security Center Multiple Vulnerabilities (TNS-2025-04)	16 Apr 202500:00	–	nessus
Tenable Nessus	Slackware Linux 15.0 / current curl Multiple Vulnerabilities (SSA:2025-036-01)	5 Feb 202500:00	–	nessus
Tenable Nessus	SUSE SLED15: curl / libcurl-devel / libcurl-devel-32bit / libcurl4 / etc (SUSE-SU-2025:03198-1)	13 Sep 202500:00	–	nessus
Tenable Nessus	Tenable Identity Exposure < 3.77.9 Multiple Vulnerabilities (TNS-2025-01)	20 Feb 202500:00	–	nessus
Tenable Nessus	Siemens SIMATIC and SCALANCE Multiple Releases of Same Resource or Handle (CVE-2025-0665)	13 Nov 202500:00	–	nessus
BDU FSTEC	The vulnerability of the eventfd file descriptor in the libcurl library allows a attacker to execute arbitrary code or disclose protected information.	5 Mar 202500:00	–	bdu_fstec

Vulners

Node

curl curlMatch8.11.1

Source	Link
curl	www.curl.se/docs/CVE-2025-0665.json
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
hackerone	www.hackerone.com/reports/2954286
curl	www.curl.se/docs/CVE-2025-0665.html

17 Mar 2026 18:30Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17 - 9.8

EPSS0.013

SSVC