{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-0725", "assignerOrgId": "2499f714-1537-4658-8207-48ae4bb9eae9", "state": "PUBLISHED", "assignerShortName": "curl", "dateReserved": "2025-01-27T04:58:09.514Z", "datePublished": "2025-02-05T09:18:20.468Z", "dateUpdated": "2025-03-07T00:10:50.268Z"}, "containers": {"cna": {"title": "gzip integer overflow", "descriptions": [{"lang": "en", "value": "When libcurl is asked to perform automatic gzip decompression of\ncontent-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option,\n**using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would\nmake libcurl perform a buffer overflow."}], "providerMetadata": {"orgId": "2499f714-1537-4658-8207-48ae4bb9eae9", "shortName": "curl", "dateUpdated": "2025-02-05T09:18:20.468Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-680 Integer Overflow to Buffer Overflow"}]}], "affected": [{"vendor": "curl", "product": "curl", "versions": [{"version": "8.11.1", "status": "affected", "lessThanOrEqual": "8.11.1", "versionType": "semver"}, {"version": "8.11.0", "status": "affected", "lessThanOrEqual": "8.11.0", "versionType": "semver"}, {"version": "8.10.1", "status": "affected", "lessThanOrEqual": "8.10.1", "versionType": "semver"}, {"version": "8.10.0", "status": "affected", "lessThanOrEqual": "8.10.0", "versionType": "semver"}, {"version": "8.9.1", "status": "affected", "lessThanOrEqual": "8.9.1", "versionType": "semver"}, {"version": "8.9.0", "status": "affected", "lessThanOrEqual": "8.9.0", "versionType": "semver"}, {"version": "8.8.0", "status": "affected", "lessThanOrEqual": "8.8.0", "versionType": "semver"}, {"version": "8.7.1", "status": "affected", "lessThanOrEqual": "8.7.1", "versionType": "semver"}, {"version": "8.7.0", "status": "affected", "lessThanOrEqual": "8.7.0", "versionType": "semver"}, {"version": "8.6.0", "status": "affected", "lessThanOrEqual": "8.6.0", "versionType": "semver"}, {"version": "8.5.0", "status": "affected", "lessThanOrEqual": "8.5.0", "versionType": "semver"}, {"version": "8.4.0", "status": "affected", "lessThanOrEqual": "8.4.0", "versionType": "semver"}, {"version": "8.3.0", "status": "affected", "lessThanOrEqual": "8.3.0", "versionType": "semver"}, {"version": "8.2.1", "status": "affected", "lessThanOrEqual": "8.2.1", "versionType": "semver"}, {"version": "8.2.0", "status": "affected", "lessThanOrEqual": "8.2.0", "versionType": "semver"}, {"version": "8.1.2", "status": "affected", "lessThanOrEqual": "8.1.2", "versionType": "semver"}, {"version": "8.1.1", "status": "affected", "lessThanOrEqual": "8.1.1", "versionType": "semver"}, {"version": "8.1.0", "status": "affected", "lessThanOrEqual": "8.1.0", "versionType": "semver"}, {"version": "8.0.1", "status": "affected", "lessThanOrEqual": "8.0.1", "versionType": "semver"}, {"version": "8.0.0", "status": "affected", "lessThanOrEqual": "8.0.0", "versionType": "semver"}, {"version": "7.88.1", "status": "affected", "lessThanOrEqual": "7.88.1", "versionType": "semver"}, {"version": "7.88.0", "status": "affected", "lessThanOrEqual": "7.88.0", "versionType": "semver"}, {"version": "7.87.0", "status": "affected", "lessThanOrEqual": "7.87.0", "versionType": "semver"}, {"version": "7.86.0", "status": "affected", "lessThanOrEqual": "7.86.0", "versionType": "semver"}, {"version": "7.85.0", "status": "affected", "lessThanOrEqual": "7.85.0", "versionType": "semver"}, {"version": "7.84.0", "status": "affected", "lessThanOrEqual": "7.84.0", "versionType": "semver"}, {"version": "7.83.1", "status": "affected", "lessThanOrEqual": "7.83.1", "versionType": "semver"}, {"version": "7.83.0", "status": "affected", "lessThanOrEqual": "7.83.0", "versionType": "semver"}, {"version": "7.82.0", "status": "affected", "lessThanOrEqual": "7.82.0", "versionType": "semver"}, {"version": "7.81.0", "status": "affected", "lessThanOrEqual": "7.81.0", "versionType": "semver"}, {"version": "7.80.0", "status": "affected", "lessThanOrEqual": "7.80.0", "versionType": "semver"}, {"version": "7.79.1", "status": "affected", "lessThanOrEqual": "7.79.1", "versionType": "semver"}, {"version": "7.79.0", "status": "affected", "lessThanOrEqual": "7.79.0", "versionType": "semver"}, {"version": "7.78.0", "status": "affected", "lessThanOrEqual": "7.78.0", "versionType": "semver"}, {"version": "7.77.0", "status": "affected", "lessThanOrEqual": "7.77.0", "versionType": "semver"}, {"version": "7.76.1", "status": "affected", "lessThanOrEqual": "7.76.1", "versionType": "semver"}, {"version": "7.76.0", "status": "affected", "lessThanOrEqual": "7.76.0", "versionType": "semver"}, {"version": "7.75.0", "status": "affected", "lessThanOrEqual": "7.75.0", "versionType": "semver"}, {"version": "7.74.0", "status": "affected", "lessThanOrEqual": "7.74.0", "versionType": "semver"}, {"version": "7.73.0", "status": "affected", "lessThanOrEqual": "7.73.0", "versionType": "semver"}, {"version": "7.72.0", "status": "affected", "lessThanOrEqual": "7.72.0", "versionType": "semver"}, {"version": "7.71.1", "status": "affected", "lessThanOrEqual": "7.71.1", "versionType": "semver"}, {"version": "7.71.0", "status": "affected", "lessThanOrEqual": "7.71.0", "versionType": "semver"}, {"version": "7.70.0", "status": "affected", "lessThanOrEqual": "7.70.0", "versionType": "semver"}, {"version": "7.69.1", "status": "affected", "lessThanOrEqual": "7.69.1", "versionType": "semver"}, {"version": "7.69.0", "status": "affected", "lessThanOrEqual": "7.69.0", "versionType": "semver"}, {"version": "7.68.0", "status": "affected", "lessThanOrEqual": "7.68.0", "versionType": "semver"}, {"version": "7.67.0", "status": "affected", "lessThanOrEqual": "7.67.0", "versionType": "semver"}, {"version": "7.66.0", "status": "affected", "lessThanOrEqual": "7.66.0", "versionType": "semver"}, {"version": "7.65.3", "status": "affected", "lessThanOrEqual": "7.65.3", "versionType": "semver"}, {"version": "7.65.2", "status": "affected", "lessThanOrEqual": "7.65.2", "versionType": "semver"}, {"version": "7.65.1", "status": "affected", "lessThanOrEqual": "7.65.1", "versionType": "semver"}, {"version": "7.65.0", "status": "affected", "lessThanOrEqual": "7.65.0", "versionType": "semver"}, {"version": "7.64.1", "status": "affected", "lessThanOrEqual": "7.64.1", "versionType": "semver"}, {"version": "7.64.0", "status": "affected", "lessThanOrEqual": "7.64.0", "versionType": "semver"}, {"version": "7.63.0", "status": "affected", "lessThanOrEqual": "7.63.0", "versionType": "semver"}, {"version": "7.62.0", "status": "affected", "lessThanOrEqual": "7.62.0", "versionType": "semver"}, {"version": "7.61.1", "status": "affected", "lessThanOrEqual": "7.61.1", "versionType": "semver"}, {"version": "7.61.0", "status": "affected", "lessThanOrEqual": "7.61.0", "versionType": "semver"}, {"version": "7.60.0", "status": "affected", "lessThanOrEqual": "7.60.0", "versionType": "semver"}, {"version": "7.59.0", "status": "affected", "lessThanOrEqual": "7.59.0", "versionType": "semver"}, {"version": "7.58.0", "status": "affected", "lessThanOrEqual": "7.58.0", "versionType": "semver"}, {"version": "7.57.0", "status": "affected", "lessThanOrEqual": "7.57.0", "versionType": "semver"}, {"version": "7.56.1", "status": "affected", "lessThanOrEqual": "7.56.1", "versionType": "semver"}, {"version": "7.56.0", "status": "affected", "lessThanOrEqual": "7.56.0", "versionType": "semver"}, {"version": "7.55.1", "status": "affected", "lessThanOrEqual": "7.55.1", "versionType": "semver"}, {"version": "7.55.0", "status": "affected", "lessThanOrEqual": "7.55.0", "versionType": "semver"}, {"version": "7.54.1", "status": "affected", "lessThanOrEqual": "7.54.1", "versionType": "semver"}, {"version": "7.54.0", "status": "affected", "lessThanOrEqual": "7.54.0", "versionType": "semver"}, {"version": "7.53.1", "status": "affected", "lessThanOrEqual": "7.53.1", "versionType": "semver"}, {"version": "7.53.0", "status": "affected", "lessThanOrEqual": "7.53.0", "versionType": "semver"}, {"version": "7.52.1", "status": "affected", "lessThanOrEqual": "7.52.1", "versionType": "semver"}, {"version": "7.52.0", "status": "affected", "lessThanOrEqual": "7.52.0", "versionType": "semver"}, {"version": "7.51.0", "status": "affected", "lessThanOrEqual": "7.51.0", "versionType": "semver"}, {"version": "7.50.3", "status": "affected", "lessThanOrEqual": "7.50.3", "versionType": "semver"}, {"version": "7.50.2", "status": "affected", "lessThanOrEqual": "7.50.2", "versionType": "semver"}, {"version": "7.50.1", "status": "affected", "lessThanOrEqual": "7.50.1", "versionType": "semver"}, {"version": "7.50.0", "status": "affected", "lessThanOrEqual": "7.50.0", "versionType": "semver"}, {"version": "7.49.1", "status": "affected", "lessThanOrEqual": "7.49.1", "versionType": "semver"}, {"version": "7.49.0", "status": "affected", "lessThanOrEqual": "7.49.0", "versionType": "semver"}, {"version": "7.48.0", "status": "affected", "lessThanOrEqual": "7.48.0", "versionType": "semver"}, {"version": "7.47.1", "status": "affected", "lessThanOrEqual": "7.47.1", "versionType": "semver"}, {"version": "7.47.0", "status": "affected", "lessThanOrEqual": "7.47.0", "versionType": "semver"}, {"version": "7.46.0", "status": "affected", "lessThanOrEqual": "7.46.0", "versionType": "semver"}, {"version": "7.45.0", "status": "affected", "lessThanOrEqual": "7.45.0", "versionType": "semver"}, {"version": "7.44.0", "status": "affected", "lessThanOrEqual": "7.44.0", "versionType": "semver"}, {"version": "7.43.0", "status": "affected", "lessThanOrEqual": "7.43.0", "versionType": "semver"}, {"version": "7.42.1", "status": "affected", "lessThanOrEqual": "7.42.1", "versionType": "semver"}, {"version": "7.42.0", "status": "affected", "lessThanOrEqual": "7.42.0", "versionType": "semver"}, {"version": "7.41.0", "status": "affected", "lessThanOrEqual": "7.41.0", "versionType": "semver"}, {"version": "7.40.0", "status": "affected", "lessThanOrEqual": "7.40.0", "versionType": "semver"}, {"version": "7.39.0", "status": "affected", "lessThanOrEqual": "7.39.0", "versionType": "semver"}, {"version": "7.38.0", "status": "affected", "lessThanOrEqual": "7.38.0", "versionType": "semver"}, {"version": "7.37.1", "status": "affected", "lessThanOrEqual": "7.37.1", "versionType": "semver"}, {"version": "7.37.0", "status": "affected", "lessThanOrEqual": "7.37.0", "versionType": "semver"}, {"version": "7.36.0", "status": "affected", "lessThanOrEqual": "7.36.0", "versionType": "semver"}, {"version": "7.35.0", "status": "affected", "lessThanOrEqual": "7.35.0", "versionType": "semver"}, {"version": "7.34.0", "status": "affected", "lessThanOrEqual": "7.34.0", "versionType": "semver"}, {"version": "7.33.0", "status": "affected", "lessThanOrEqual": "7.33.0", "versionType": "semver"}, {"version": "7.32.0", "status": "affected", "lessThanOrEqual": "7.32.0", "versionType": "semver"}, {"version": "7.31.0", "status": "affected", "lessThanOrEqual": "7.31.0", "versionType": "semver"}, {"version": "7.30.0", "status": "affected", "lessThanOrEqual": "7.30.0", "versionType": "semver"}, {"version": "7.29.0", "status": "affected", "lessThanOrEqual": "7.29.0", "versionType": "semver"}, {"version": "7.28.1", "status": "affected", "lessThanOrEqual": "7.28.1", "versionType": "semver"}, {"version": "7.28.0", "status": "affected", "lessThanOrEqual": "7.28.0", "versionType": "semver"}, {"version": "7.27.0", "status": "affected", "lessThanOrEqual": "7.27.0", "versionType": "semver"}, {"version": "7.26.0", "status": "affected", "lessThanOrEqual": "7.26.0", "versionType": "semver"}, {"version": "7.25.0", "status": "affected", "lessThanOrEqual": "7.25.0", "versionType": "semver"}, {"version": "7.24.0", "status": "affected", "lessThanOrEqual": "7.24.0", "versionType": "semver"}, {"version": "7.23.1", "status": "affected", "lessThanOrEqual": "7.23.1", "versionType": "semver"}, {"version": "7.23.0", "status": "affected", "lessThanOrEqual": "7.23.0", "versionType": "semver"}, {"version": "7.22.0", "status": "affected", "lessThanOrEqual": "7.22.0", "versionType": "semver"}, {"version": "7.21.7", "status": "affected", "lessThanOrEqual": "7.21.7", "versionType": "semver"}, {"version": "7.21.6", "status": "affected", "lessThanOrEqual": "7.21.6", "versionType": "semver"}, {"version": "7.21.5", "status": "affected", "lessThanOrEqual": "7.21.5", "versionType": "semver"}, {"version": "7.21.4", "status": "affected", "lessThanOrEqual": "7.21.4", "versionType": "semver"}, {"version": "7.21.3", "status": "affected", "lessThanOrEqual": "7.21.3", "versionType": "semver"}, {"version": "7.21.2", "status": "affected", "lessThanOrEqual": "7.21.2", "versionType": "semver"}, {"version": "7.21.1", "status": "affected", "lessThanOrEqual": "7.21.1", "versionType": "semver"}, {"version": "7.21.0", "status": "affected", "lessThanOrEqual": "7.21.0", "versionType": "semver"}, {"version": "7.20.1", "status": "affected", "lessThanOrEqual": "7.20.1", "versionType": "semver"}, {"version": "7.20.0", "status": "affected", "lessThanOrEqual": "7.20.0", "versionType": "semver"}, {"version": "7.19.7", "status": "affected", "lessThanOrEqual": "7.19.7", "versionType": "semver"}, {"version": "7.19.6", "status": "affected", "lessThanOrEqual": "7.19.6", "versionType": "semver"}, {"version": "7.19.5", "status": "affected", "lessThanOrEqual": "7.19.5", "versionType": "semver"}, {"version": "7.19.4", "status": "affected", "lessThanOrEqual": "7.19.4", "versionType": "semver"}, {"version": "7.19.3", "status": "affected", "lessThanOrEqual": "7.19.3", "versionType": "semver"}, {"version": "7.19.2", "status": "affected", "lessThanOrEqual": "7.19.2", "versionType": "semver"}, {"version": "7.19.1", "status": "affected", "lessThanOrEqual": "7.19.1", "versionType": "semver"}, {"version": "7.19.0", "status": "affected", "lessThanOrEqual": "7.19.0", "versionType": "semver"}, {"version": "7.18.2", "status": "affected", "lessThanOrEqual": "7.18.2", "versionType": "semver"}, {"version": "7.18.1", "status": "affected", "lessThanOrEqual": "7.18.1", "versionType": "semver"}, {"version": "7.18.0", "status": "affected", "lessThanOrEqual": "7.18.0", "versionType": "semver"}, {"version": "7.17.1", "status": "affected", "lessThanOrEqual": "7.17.1", "versionType": "semver"}, {"version": "7.17.0", "status": "affected", "lessThanOrEqual": "7.17.0", "versionType": "semver"}, {"version": "7.16.4", "status": "affected", "lessThanOrEqual": "7.16.4", "versionType": "semver"}, {"version": "7.16.3", "status": "affected", "lessThanOrEqual": "7.16.3", "versionType": "semver"}, {"version": "7.16.2", "status": "affected", "lessThanOrEqual": "7.16.2", "versionType": "semver"}, {"version": "7.16.1", "status": "affected", "lessThanOrEqual": "7.16.1", "versionType": "semver"}, {"version": "7.16.0", "status": "affected", "lessThanOrEqual": "7.16.0", "versionType": "semver"}, {"version": "7.15.5", "status": "affected", "lessThanOrEqual": "7.15.5", "versionType": "semver"}, {"version": "7.15.4", "status": "affected", "lessThanOrEqual": "7.15.4", "versionType": "semver"}, {"version": "7.15.3", "status": "affected", "lessThanOrEqual": "7.15.3", "versionType": "semver"}, {"version": "7.15.2", "status": "affected", "lessThanOrEqual": "7.15.2", "versionType": "semver"}, {"version": "7.15.1", "status": "affected", "lessThanOrEqual": "7.15.1", "versionType": "semver"}, {"version": "7.15.0", "status": "affected", "lessThanOrEqual": "7.15.0", "versionType": "semver"}, {"version": "7.14.1", "status": "affected", "lessThanOrEqual": "7.14.1", "versionType": "semver"}, {"version": "7.14.0", "status": "affected", "lessThanOrEqual": "7.14.0", "versionType": "semver"}, {"version": "7.13.2", "status": "affected", "lessThanOrEqual": "7.13.2", "versionType": "semver"}, {"version": "7.13.1", "status": "affected", "lessThanOrEqual": "7.13.1", "versionType": "semver"}, {"version": "7.13.0", "status": "affected", "lessThanOrEqual": "7.13.0", "versionType": "semver"}, {"version": "7.12.3", "status": "affected", "lessThanOrEqual": "7.12.3", "versionType": "semver"}, {"version": "7.12.2", "status": "affected", "lessThanOrEqual": "7.12.2", "versionType": "semver"}, {"version": "7.12.1", "status": "affected", "lessThanOrEqual": "7.12.1", "versionType": "semver"}, {"version": "7.12.0", "status": "affected", "lessThanOrEqual": "7.12.0", "versionType": "semver"}, {"version": "7.11.2", "status": "affected", "lessThanOrEqual": "7.11.2", "versionType": "semver"}, {"version": "7.11.1", "status": "affected", "lessThanOrEqual": "7.11.1", "versionType": "semver"}, {"version": "7.11.0", "status": "affected", "lessThanOrEqual": "7.11.0", "versionType": "semver"}, {"version": "7.10.8", "status": "affected", "lessThanOrEqual": "7.10.8", "versionType": "semver"}, {"version": "7.10.7", "status": "affected", "lessThanOrEqual": "7.10.7", "versionType": "semver"}, {"version": "7.10.6", "status": "affected", "lessThanOrEqual": "7.10.6", "versionType": "semver"}, {"version": "7.10.5", "status": "affected", "lessThanOrEqual": "7.10.5", "versionType": "semver"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://curl.se/docs/CVE-2025-0725.json", "name": "json"}, {"url": "https://curl.se/docs/CVE-2025-0725.html", "name": "www"}, {"url": "https://hackerone.com/reports/2956023", "name": "issue"}], "credits": [{"lang": "en", "value": "z2_", "type": "finder"}, {"lang": "en", "value": "Daniel Stenberg", "type": "remediation developer"}]}, "adp": [{"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2025/02/05/3"}, {"url": "http://www.openwall.com/lists/oss-security/2025/02/06/2"}, {"url": "http://www.openwall.com/lists/oss-security/2025/02/06/4"}, {"url": "https://security.netapp.com/advisory/ntap-20250306-0009/"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2025-03-07T00:10:50.268Z"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.3, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-02-05T14:33:50.737849Z", "id": "CVE-2025-0725", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-05T14:34:15.390Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2025/02/05/3"}, {"url": "http://www.openwall.com/lists/oss-security/2025/02/06/2"}, {"url": "http://www.openwall.com/lists/oss-security/2025/02/06/4"}, {"url": "https://security.netapp.com/advisory/ntap-20250306-0009/"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2025-03-07T00:10:50.268Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.3, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2025-0725", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-02-05T14:33:50.737849Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-05T14:34:00.499Z"}}], "cna": {"title": "gzip integer overflow", "credits": [{"lang": "en", "type": "finder", "value": "z2_"}, {"lang": "en", "type": "remediation developer", "value": "Daniel Stenberg"}], "affected": [{"vendor": "curl", "product": "curl", "versions": [{"status": "affected", "version": "8.11.1", "versionType": "semver", "lessThanOrEqual": "8.11.1"}, {"status": "affected", "version": "8.11.0", "versionType": "semver", "lessThanOrEqual": "8.11.0"}, {"status": "affected", "version": "8.10.1", "versionType": "semver", "lessThanOrEqual": "8.10.1"}, {"status": "affected", "version": "8.10.0", "versionType": "semver", "lessThanOrEqual": "8.10.0"}, {"status": "affected", "version": "8.9.1", "versionType": "semver", "lessThanOrEqual": "8.9.1"}, {"status": "affected", "version": "8.9.0", "versionType": "semver", "lessThanOrEqual": "8.9.0"}, {"status": "affected", "version": "8.8.0", "versionType": "semver", "lessThanOrEqual": "8.8.0"}, {"status": "affected", "version": "8.7.1", "versionType": "semver", "lessThanOrEqual": "8.7.1"}, {"status": "affected", "version": "8.7.0", "versionType": "semver", "lessThanOrEqual": "8.7.0"}, {"status": "affected", "version": "8.6.0", "versionType": "semver", "lessThanOrEqual": "8.6.0"}, {"status": "affected", "version": "8.5.0", "versionType": "semver", "lessThanOrEqual": "8.5.0"}, {"status": "affected", "version": "8.4.0", "versionType": "semver", "lessThanOrEqual": "8.4.0"}, {"status": "affected", "version": "8.3.0", "versionType": "semver", "lessThanOrEqual": "8.3.0"}, {"status": "affected", "version": "8.2.1", "versionType": "semver", "lessThanOrEqual": "8.2.1"}, {"status": "affected", "version": "8.2.0", "versionType": "semver", "lessThanOrEqual": "8.2.0"}, {"status": "affected", "version": "8.1.2", "versionType": "semver", "lessThanOrEqual": "8.1.2"}, {"status": "affected", "version": "8.1.1", "versionType": "semver", "lessThanOrEqual": "8.1.1"}, {"status": "affected", "version": "8.1.0", "versionType": "semver", "lessThanOrEqual": "8.1.0"}, {"status": "affected", "version": "8.0.1", "versionType": "semver", "lessThanOrEqual": "8.0.1"}, {"status": "affected", "version": "8.0.0", "versionType": "semver", "lessThanOrEqual": "8.0.0"}, {"status": "affected", "version": "7.88.1", "versionType": "semver", "lessThanOrEqual": "7.88.1"}, {"status": "affected", "version": "7.88.0", "versionType": "semver", "lessThanOrEqual": "7.88.0"}, {"status": "affected", "version": "7.87.0", "versionType": "semver", "lessThanOrEqual": "7.87.0"}, {"status": "affected", "version": "7.86.0", "versionType": "semver", "lessThanOrEqual": "7.86.0"}, {"status": "affected", "version": "7.85.0", "versionType": "semver", "lessThanOrEqual": "7.85.0"}, {"status": "affected", "version": "7.84.0", "versionType": "semver", "lessThanOrEqual": "7.84.0"}, {"status": "affected", "version": "7.83.1", "versionType": "semver", "lessThanOrEqual": "7.83.1"}, {"status": "affected", "version": "7.83.0", "versionType": "semver", "lessThanOrEqual": "7.83.0"}, {"status": "affected", "version": "7.82.0", "versionType": "semver", "lessThanOrEqual": "7.82.0"}, {"status": "affected", "version": "7.81.0", "versionType": "semver", "lessThanOrEqual": "7.81.0"}, {"status": "affected", "version": "7.80.0", "versionType": "semver", "lessThanOrEqual": "7.80.0"}, {"status": "affected", "version": "7.79.1", "versionType": "semver", "lessThanOrEqual": "7.79.1"}, {"status": "affected", "version": "7.79.0", "versionType": "semver", "lessThanOrEqual": "7.79.0"}, {"status": "affected", "version": "7.78.0", "versionType": "semver", "lessThanOrEqual": "7.78.0"}, {"status": "affected", "version": "7.77.0", "versionType": "semver", "lessThanOrEqual": "7.77.0"}, {"status": "affected", "version": "7.76.1", "versionType": "semver", "lessThanOrEqual": "7.76.1"}, {"status": "affected", "version": "7.76.0", "versionType": "semver", "lessThanOrEqual": "7.76.0"}, {"status": "affected", "version": "7.75.0", "versionType": "semver", "lessThanOrEqual": "7.75.0"}, {"status": "affected", "version": "7.74.0", "versionType": "semver", "lessThanOrEqual": "7.74.0"}, {"status": "affected", "version": "7.73.0", "versionType": "semver", "lessThanOrEqual": "7.73.0"}, {"status": "affected", "version": "7.72.0", "versionType": "semver", "lessThanOrEqual": "7.72.0"}, {"status": "affected", "version": "7.71.1", "versionType": "semver", "lessThanOrEqual": "7.71.1"}, {"status": "affected", "version": "7.71.0", "versionType": "semver", "lessThanOrEqual": "7.71.0"}, {"status": "affected", "version": "7.70.0", "versionType": "semver", "lessThanOrEqual": "7.70.0"}, {"status": "affected", "version": "7.69.1", "versionType": "semver", "lessThanOrEqual": "7.69.1"}, {"status": "affected", "version": "7.69.0", "versionType": "semver", "lessThanOrEqual": "7.69.0"}, {"status": "affected", "version": "7.68.0", "versionType": "semver", "lessThanOrEqual": "7.68.0"}, {"status": "affected", "version": "7.67.0", "versionType": "semver", "lessThanOrEqual": "7.67.0"}, {"status": "affected", "version": "7.66.0", "versionType": "semver", "lessThanOrEqual": "7.66.0"}, {"status": "affected", "version": "7.65.3", "versionType": "semver", "lessThanOrEqual": "7.65.3"}, {"status": "affected", "version": "7.65.2", "versionType": "semver", "lessThanOrEqual": "7.65.2"}, {"status": "affected", "version": "7.65.1", "versionType": "semver", "lessThanOrEqual": "7.65.1"}, {"status": "affected", "version": "7.65.0", "versionType": "semver", "lessThanOrEqual": "7.65.0"}, {"status": "affected", "version": "7.64.1", "versionType": "semver", "lessThanOrEqual": "7.64.1"}, {"status": "affected", "version": "7.64.0", "versionType": "semver", "lessThanOrEqual": "7.64.0"}, {"status": "affected", "version": "7.63.0", "versionType": "semver", "lessThanOrEqual": "7.63.0"}, {"status": "affected", "version": "7.62.0", "versionType": "semver", "lessThanOrEqual": "7.62.0"}, {"status": "affected", "version": "7.61.1", "versionType": "semver", "lessThanOrEqual": "7.61.1"}, {"status": "affected", "version": "7.61.0", "versionType": "semver", "lessThanOrEqual": "7.61.0"}, {"status": "affected", "version": "7.60.0", "versionType": "semver", "lessThanOrEqual": "7.60.0"}, {"status": "affected", "version": "7.59.0", "versionType": "semver", "lessThanOrEqual": "7.59.0"}, {"status": "affected", "version": "7.58.0", "versionType": "semver", "lessThanOrEqual": "7.58.0"}, {"status": "affected", "version": "7.57.0", "versionType": "semver", "lessThanOrEqual": "7.57.0"}, {"status": "affected", "version": "7.56.1", "versionType": "semver", "lessThanOrEqual": "7.56.1"}, {"status": "affected", "version": "7.56.0", "versionType": "semver", "lessThanOrEqual": "7.56.0"}, {"status": "affected", "version": "7.55.1", "versionType": "semver", "lessThanOrEqual": "7.55.1"}, {"status": "affected", "version": "7.55.0", "versionType": "semver", "lessThanOrEqual": "7.55.0"}, {"status": "affected", "version": "7.54.1", "versionType": "semver", "lessThanOrEqual": "7.54.1"}, {"status": "affected", "version": "7.54.0", "versionType": "semver", "lessThanOrEqual": "7.54.0"}, {"status": "affected", "version": "7.53.1", "versionType": "semver", "lessThanOrEqual": "7.53.1"}, {"status": "affected", "version": "7.53.0", "versionType": "semver", "lessThanOrEqual": "7.53.0"}, {"status": "affected", "version": "7.52.1", "versionType": "semver", "lessThanOrEqual": "7.52.1"}, {"status": "affected", "version": "7.52.0", "versionType": "semver", "lessThanOrEqual": "7.52.0"}, {"status": "affected", "version": "7.51.0", "versionType": "semver", "lessThanOrEqual": "7.51.0"}, {"status": "affected", "version": "7.50.3", "versionType": "semver", "lessThanOrEqual": "7.50.3"}, {"status": "affected", "version": "7.50.2", "versionType": "semver", "lessThanOrEqual": "7.50.2"}, {"status": "affected", "version": "7.50.1", "versionType": "semver", "lessThanOrEqual": "7.50.1"}, {"status": "affected", "version": "7.50.0", "versionType": "semver", "lessThanOrEqual": "7.50.0"}, {"status": "affected", "version": "7.49.1", "versionType": "semver", "lessThanOrEqual": "7.49.1"}, {"status": "affected", "version": "7.49.0", "versionType": "semver", "lessThanOrEqual": "7.49.0"}, {"status": "affected", "version": "7.48.0", "versionType": "semver", "lessThanOrEqual": "7.48.0"}, {"status": "affected", "version": "7.47.1", "versionType": "semver", "lessThanOrEqual": "7.47.1"}, {"status": "affected", "version": "7.47.0", "versionType": "semver", "lessThanOrEqual": "7.47.0"}, {"status": "affected", "version": "7.46.0", "versionType": "semver", "lessThanOrEqual": "7.46.0"}, {"status": "affected", "version": "7.45.0", "versionType": "semver", "lessThanOrEqual": "7.45.0"}, {"status": "affected", "version": "7.44.0", "versionType": "semver", "lessThanOrEqual": "7.44.0"}, {"status": "affected", "version": "7.43.0", "versionType": "semver", "lessThanOrEqual": "7.43.0"}, {"status": "affected", "version": "7.42.1", "versionType": "semver", "lessThanOrEqual": "7.42.1"}, {"status": "affected", "version": "7.42.0", "versionType": "semver", "lessThanOrEqual": "7.42.0"}, {"status": "affected", "version": "7.41.0", "versionType": "semver", "lessThanOrEqual": "7.41.0"}, {"status": "affected", "version": "7.40.0", "versionType": "semver", "lessThanOrEqual": "7.40.0"}, {"status": "affected", "version": "7.39.0", "versionType": "semver", "lessThanOrEqual": "7.39.0"}, {"status": "affected", "version": "7.38.0", "versionType": "semver", "lessThanOrEqual": "7.38.0"}, {"status": "affected", "version": "7.37.1", "versionType": "semver", "lessThanOrEqual": "7.37.1"}, {"status": "affected", "version": "7.37.0", "versionType": "semver", "lessThanOrEqual": "7.37.0"}, {"status": "affected", "version": "7.36.0", "versionType": "semver", "lessThanOrEqual": "7.36.0"}, {"status": "affected", "version": "7.35.0", "versionType": "semver", "lessThanOrEqual": "7.35.0"}, {"status": "affected", "version": "7.34.0", "versionType": "semver", "lessThanOrEqual": "7.34.0"}, {"status": "affected", "version": "7.33.0", "versionType": "semver", "lessThanOrEqual": "7.33.0"}, {"status": "affected", "version": "7.32.0", "versionType": "semver", "lessThanOrEqual": "7.32.0"}, {"status": "affected", "version": "7.31.0", "versionType": "semver", "lessThanOrEqual": "7.31.0"}, {"status": "affected", "version": "7.30.0", "versionType": "semver", "lessThanOrEqual": "7.30.0"}, {"status": "affected", "version": "7.29.0", "versionType": "semver", "lessThanOrEqual": "7.29.0"}, {"status": "affected", "version": "7.28.1", "versionType": "semver", "lessThanOrEqual": "7.28.1"}, {"status": "affected", "version": "7.28.0", "versionType": "semver", "lessThanOrEqual": "7.28.0"}, {"status": "affected", "version": "7.27.0", "versionType": "semver", "lessThanOrEqual": "7.27.0"}, {"status": "affected", "version": "7.26.0", "versionType": "semver", "lessThanOrEqual": "7.26.0"}, {"status": "affected", "version": "7.25.0", "versionType": "semver", "lessThanOrEqual": "7.25.0"}, {"status": "affected", "version": "7.24.0", "versionType": "semver", "lessThanOrEqual": "7.24.0"}, {"status": "affected", "version": "7.23.1", "versionType": "semver", "lessThanOrEqual": "7.23.1"}, {"status": "affected", "version": "7.23.0", "versionType": "semver", "lessThanOrEqual": "7.23.0"}, {"status": "affected", "version": "7.22.0", "versionType": "semver", "lessThanOrEqual": "7.22.0"}, {"status": "affected", "version": "7.21.7", "versionType": "semver", "lessThanOrEqual": "7.21.7"}, {"status": "affected", "version": "7.21.6", "versionType": "semver", "lessThanOrEqual": "7.21.6"}, {"status": "affected", "version": "7.21.5", "versionType": "semver", "lessThanOrEqual": "7.21.5"}, {"status": "affected", "version": "7.21.4", "versionType": "semver", "lessThanOrEqual": "7.21.4"}, {"status": "affected", "version": "7.21.3", "versionType": "semver", "lessThanOrEqual": "7.21.3"}, {"status": "affected", "version": "7.21.2", "versionType": "semver", "lessThanOrEqual": "7.21.2"}, {"status": "affected", "version": "7.21.1", "versionType": "semver", "lessThanOrEqual": "7.21.1"}, {"status": "affected", "version": "7.21.0", "versionType": "semver", "lessThanOrEqual": "7.21.0"}, {"status": "affected", "version": "7.20.1", "versionType": "semver", "lessThanOrEqual": "7.20.1"}, {"status": "affected", "version": "7.20.0", "versionType": "semver", "lessThanOrEqual": "7.20.0"}, {"status": "affected", "version": "7.19.7", "versionType": "semver", "lessThanOrEqual": "7.19.7"}, {"status": "affected", "version": "7.19.6", "versionType": "semver", "lessThanOrEqual": "7.19.6"}, {"status": "affected", "version": "7.19.5", "versionType": "semver", "lessThanOrEqual": "7.19.5"}, {"status": "affected", "version": "7.19.4", "versionType": "semver", "lessThanOrEqual": "7.19.4"}, {"status": "affected", "version": "7.19.3", "versionType": "semver", "lessThanOrEqual": "7.19.3"}, {"status": "affected", "version": "7.19.2", "versionType": "semver", "lessThanOrEqual": "7.19.2"}, {"status": "affected", "version": "7.19.1", "versionType": "semver", "lessThanOrEqual": "7.19.1"}, {"status": "affected", "version": "7.19.0", "versionType": "semver", "lessThanOrEqual": "7.19.0"}, {"status": "affected", "version": "7.18.2", "versionType": "semver", "lessThanOrEqual": "7.18.2"}, {"status": "affected", "version": "7.18.1", "versionType": "semver", "lessThanOrEqual": "7.18.1"}, {"status": "affected", "version": "7.18.0", "versionType": "semver", "lessThanOrEqual": "7.18.0"}, {"status": "affected", "version": "7.17.1", "versionType": "semver", "lessThanOrEqual": "7.17.1"}, {"status": "affected", "version": "7.17.0", "versionType": "semver", "lessThanOrEqual": "7.17.0"}, {"status": "affected", "version": "7.16.4", "versionType": "semver", "lessThanOrEqual": "7.16.4"}, {"status": "affected", "version": "7.16.3", "versionType": "semver", "lessThanOrEqual": "7.16.3"}, {"status": "affected", "version": "7.16.2", "versionType": "semver", "lessThanOrEqual": "7.16.2"}, {"status": "affected", "version": "7.16.1", "versionType": "semver", "lessThanOrEqual": "7.16.1"}, {"status": "affected", "version": "7.16.0", "versionType": "semver", "lessThanOrEqual": "7.16.0"}, {"status": "affected", "version": "7.15.5", "versionType": "semver", "lessThanOrEqual": "7.15.5"}, {"status": "affected", "version": "7.15.4", "versionType": "semver", "lessThanOrEqual": "7.15.4"}, {"status": "affected", "version": "7.15.3", "versionType": "semver", "lessThanOrEqual": "7.15.3"}, {"status": "affected", "version": "7.15.2", "versionType": "semver", "lessThanOrEqual": "7.15.2"}, {"status": "affected", "version": "7.15.1", "versionType": "semver", "lessThanOrEqual": "7.15.1"}, {"status": "affected", "version": "7.15.0", "versionType": "semver", "lessThanOrEqual": "7.15.0"}, {"status": "affected", "version": "7.14.1", "versionType": "semver", "lessThanOrEqual": "7.14.1"}, {"status": "affected", "version": "7.14.0", "versionType": "semver", "lessThanOrEqual": "7.14.0"}, {"status": "affected", "version": "7.13.2", "versionType": "semver", "lessThanOrEqual": "7.13.2"}, {"status": "affected", "version": "7.13.1", "versionType": "semver", "lessThanOrEqual": "7.13.1"}, {"status": "affected", "version": "7.13.0", "versionType": "semver", "lessThanOrEqual": "7.13.0"}, {"status": "affected", "version": "7.12.3", "versionType": "semver", "lessThanOrEqual": "7.12.3"}, {"status": "affected", "version": "7.12.2", "versionType": "semver", "lessThanOrEqual": "7.12.2"}, {"status": "affected", "version": "7.12.1", "versionType": "semver", "lessThanOrEqual": "7.12.1"}, {"status": "affected", "version": "7.12.0", "versionType": "semver", "lessThanOrEqual": "7.12.0"}, {"status": "affected", "version": "7.11.2", "versionType": "semver", "lessThanOrEqual": "7.11.2"}, {"status": "affected", "version": "7.11.1", "versionType": "semver", "lessThanOrEqual": "7.11.1"}, {"status": "affected", "version": "7.11.0", "versionType": "semver", "lessThanOrEqual": "7.11.0"}, {"status": "affected", "version": "7.10.8", "versionType": "semver", "lessThanOrEqual": "7.10.8"}, {"status": "affected", "version": "7.10.7", "versionType": "semver", "lessThanOrEqual": "7.10.7"}, {"status": "affected", "version": "7.10.6", "versionType": "semver", "lessThanOrEqual": "7.10.6"}, {"status": "affected", "version": "7.10.5", "versionType": "semver", "lessThanOrEqual": "7.10.5"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://curl.se/docs/CVE-2025-0725.json", "name": "json"}, {"url": "https://curl.se/docs/CVE-2025-0725.html", "name": "www"}, {"url": "https://hackerone.com/reports/2956023", "name": "issue"}], "descriptions": [{"lang": "en", "value": "When libcurl is asked to perform automatic gzip decompression of\ncontent-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option,\n**using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would\nmake libcurl perform a buffer overflow."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-680 Integer Overflow to Buffer Overflow"}]}], "providerMetadata": {"orgId": "2499f714-1537-4658-8207-48ae4bb9eae9", "shortName": "curl", "dateUpdated": "2025-02-05T09:18:20.468Z"}}}, "cveMetadata": {"cveId": "CVE-2025-0725", "state": "PUBLISHED", "dateUpdated": "2025-03-07T00:10:50.268Z", "dateReserved": "2025-01-27T04:58:09.514Z", "assignerOrgId": "2499f714-1537-4658-8207-48ae4bb9eae9", "datePublished": "2025-02-05T09:18:20.468Z", "assignerShortName": "curl"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*", "matchCriteriaId": "34EA884B-6BF6-4F00-B302-CA48450A28D3", "versionEndExcluding": "8.12.0", "versionStartIncluding": "7.10.5", "vulnerable": true}, {"criteria": "cpe:2.3:a:haxx:libcurl:*:*:*:*:*:*:*:*", "matchCriteriaId": "00A479A7-7885-4086-A577-C2E7E95FEADA", "versionEndExcluding": "8.12.0", "versionStartIncluding": "7.10.5", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:netapp:hci_baseboard_management_controller:-:*:*:*:*:*:*:*", "matchCriteriaId": "C93821CF-3117-4763-8163-DD49F6D2CA8E", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:netapp:hci_h610s_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "910D39ED-5E36-42F2-B824-E7F4A2ED0BD7", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netapp:hci_h610s:-:*:*:*:*:*:*:*", "matchCriteriaId": "33960CC8-DC73-4E15-8A19-686F5F528006", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:netapp:hci_h610c_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "A9BC74D7-687D-46AA-862F-D755A3D1AA05", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netapp:hci_h610c:-:*:*:*:*:*:*:*", "matchCriteriaId": "436851DF-1531-40CE-8C71-561978877E27", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:netapp:hci_h615c_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "7AEAE936-CBDA-4C3A-B139-BE9C86EC6CB7", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:netapp:hci_h615c:-:*:*:*:*:*:*:*", "matchCriteriaId": "D471C87E-D861-4AC7-9418-900858C5BF24", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:netapp:solidfire_\\&_hci_management_node:-:*:*:*:*:*:*:*", "matchCriteriaId": "D6D700C5-F67F-4FFB-BE69-D524592A3D2E", "vulnerable": true}, {"criteria": "cpe:2.3:a:netapp:solidfire_\\&_hci_storage_node:-:*:*:*:*:*:*:*", "matchCriteriaId": "D452B464-1200-4B72-9A89-42DC58486191", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "When libcurl is asked to perform automatic gzip decompression of\ncontent-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option,\n**using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would\nmake libcurl perform a buffer overflow."}, {"lang": "es", "value": "Cuando se le solicita a libcurl que realice una descompresi\u00f3n gzip autom\u00e1tica de respuestas HTTP codificadas con contenido con la opci\u00f3n `CURLOPT_ACCEPT_ENCODING`, **usando zlib 1.2.0.3 o anterior**, un desbordamiento de entero controlado por un atacante har\u00eda que libcurl realice un desbordamiento de b\u00fafer."}], "id": "CVE-2025-0725", "lastModified": "2025-05-13T18:35:30.150", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.3, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.4, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2025-02-05T10:15:22.980", "references": [{"source": "2499f714-1537-4658-8207-48ae4bb9eae9", "tags": ["Vendor Advisory"], "url": "https://curl.se/docs/CVE-2025-0725.html"}, {"source": "2499f714-1537-4658-8207-48ae4bb9eae9", "tags": ["Vendor Advisory"], "url": "https://curl.se/docs/CVE-2025-0725.json"}, {"source": "2499f714-1537-4658-8207-48ae4bb9eae9", "tags": ["Exploit", "Issue Tracking"], "url": "https://hackerone.com/reports/2956023"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List"], "url": "http://www.openwall.com/lists/oss-security/2025/02/05/3"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List"], "url": "http://www.openwall.com/lists/oss-security/2025/02/06/2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List"], "url": "http://www.openwall.com/lists/oss-security/2025/02/06/4"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://security.netapp.com/advisory/ntap-20250306-0009/"}], "sourceIdentifier": "2499f714-1537-4658-8207-48ae4bb9eae9", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-120"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "libcurl: Buffer Overflow in libcurl via zlib Integer Overflow", "id": "2343899", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2343899"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.0", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "status": "draft"}, "cwe": "CWE-680", "details": ["When libcurl is asked to perform automatic gzip decompression of\ncontent-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option,\n**using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would\nmake libcurl perform a buffer overflow.", "A flaw was found in libcurl. This vulnerability allows an attacker to trigger a buffer overflow via an integer overflow in zlib 1.2.0.3 or older when libcurl performs automatic gzip decompression."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}, "name": "CVE-2025-0725", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "curl", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "s390utils", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Fix deferred", "package_name": "curl", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Fix deferred", "package_name": "curl", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "curl", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "curl", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:jboss_core_services:1", "fix_state": "Fix deferred", "package_name": "curl", "product_name": "Red Hat JBoss Core Services"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "rhcos", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2025-02-05T09:18:20Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2025-0725\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-0725\nhttps://curl.se/docs/CVE-2025-0725.html\nhttps://curl.se/docs/CVE-2025-0725.json\nhttps://hackerone.com/reports/2956023"], "statement": "This CVE is not applicable to any supported version of Red Hat Enterprise Linux since RHEL-4.", "threat_severity": "Low"}