CVE-2025-0665

Mô tả

Tham khảo

• curl.se/docs/CVE-2025-0665.html · Vendor Advisory
• curl.se/docs/CVE-2025-0665.json · Vendor Advisory
• hackerone.com/reports/2954286 · Exploit
• openwall.com/lists/oss-security/2025/02/05/2 · Mailing List
• openwall.com/lists/oss-security/2025/02/05/5 · Mailing List
• security.netapp.com/advisory/ntap-20250306-0007 · Third Party Advisory
• cert-portal.siemens.com/productcert/html/ssa-089022.html
• cert-portal.siemens.com/productcert/html/ssa-398330.html

Lỗ hổng khác của curl

• CVE-2026-82209CAO 8.2When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a `Set-Cookie` header where t…
• CVE-2026-82208CAO 7.5With the wolfSSL backend, when CA caching is enabled and an `CURLOPT_SSL_CTX_FUNCTION` callback replaces the trust store, libcurl can silent…
• CVE-2026-80255CAO 7.5A `Set-Cookie:` header using tab (horizontal tab, ASCII code 9) instead of space (ascii code 32) immediately before the `Secure` attribute c…
• CVE-2026-80231CAO 7.5A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when using a different Native CA Store…
• CVE-2026-80230CAO 7.5When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that disable standard peer verification (`CURLOPT_SSL_VERIFYPEER = 0` and `CU…