K000150939: cURL vulnerability CVE-2025-0665

Security Advisory Description libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve. CVE-2025-0665 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory...

Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Improper and Incorrect Authorization and SQL Injection in Vault (CVE-2023-0665, CVE-2023-24999, CVE-2023-0620)

Summary Vault is used by IBM Storage Fusion Data Foundation as part of user authentication. This bulletin identifies the steps to take to address the vulnerability in IBM Storage Fusion Data Foundation. CVE-2023-0665, CVE-2023-24999, CVE-2023-0620. Vulnerability Details CVEID:CVE-2023-0665...

CVE-2025-0665 affecting package curl for versions less than 8.11.1-3

CVE-2025-0665 affecting package curl for versions less than 8.11.1-3. A patched version of the package is available...

SUSE-SU-2025:20239-1 Security update for curl

This update for curl fixes the following issues: Update to 8.12.1: Bugfixes: - asyn-thread: fix build with 'CURLDISABLESOCKETPAIR' - asyn-thread: fix HTTPS RR crash - asyn-thread: fix the returned bitmask from Curlresolvergetsock - asyn-thread: survive a c-ares channel set to NULL - cmake: always...

Curl < 8.12.0 Double Close (CVE-2025-0665)

libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 8090...

BELL-CVE-2025-0665

Bulletin has no description...

DEBIAN-CVE-2025-0665

libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve...

CVE-2025-0665 vulnerabilities

Vulnerabilities for packages: curl...

CVE-2025-0665 vulnerabilities

Vulnerabilities for packages: curl...

CVE-2025-0665

CVE-2025-0665 affects libcurl/curl. The issue is double-closing the same eventfd file descriptor when bringing down a connection channel after a threaded name resolve, leading to potential instability and misbehavior. Several sources note that this can allow a remote attacker to execute arbitrary...

CVE-2025-0665 eventfd double close

libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve...

CVE-2025-0665

libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve...

CVE-2025-0665

libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve...

UBUNTU-CVE-2025-0665

libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve...

curl: CVE-2025-0665: eventfd double close

Summary: GitHub issue 15725 describes a double close in libcurl 8.11.1. I believe that a double close in multi threaded code should be considered a security vulnerability. A fix already exists for this, so it should be good in the next release. I am not 100% sure this is the place to be making su...

Photon OS 4.0: Nss PHSA-2024-4.0-0665

An update of the nss package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0665. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20517...

Important Photon OS Security Update - PHSA-2024-4.0-0665

Updates of 'nss' packages of Photon OS have been released...

Photon OS 3.0: Go PHSA-2023-3.0-0665

An update of the go package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-3.0-0665. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid204658...

CVE-2024-0665

creationtimestamp| type| source ---|---|--- 2024-01-24 09:26:09+00:00| seen| https://t.me/ctinow/172601 2024-01-28 12:17:31+00:00| seen| https://t.me/arpsyndicate/3285 2024-02-17 15:41:14+00:00| seen| https://t.me/ctinow/186956...

CVE-2024-0665

The WP Customer Area plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in all versions up to, and including, 8.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...