CVE-2025-0665 – libcurl Eventfd File Descriptor Double Close
The following table lists the changes that have been made to the CVE-2025-0665 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics.
-
CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0
Feb. 05, 2025
Action Type Old Value New Value Added CVSS V3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Added CWE CWE-1341 -
CVE Modified by af854a3a-2127-422b-91ae-364da2661108
Feb. 05, 2025
Action Type Old Value New Value Added Reference http://www.openwall.com/lists/oss-security/2025/02/05/2 -
New CVE Received by 2499f714-1537-4658-8207-48ae4bb9eae9
Feb. 05, 2025
Action Type Old Value New Value Added Description libcurl would wrongly close the same eventfd file descriptor twice when taking
down a connection channel after having completed a threaded name resolve.Added Reference https://curl.se/docs/CVE-2025-0665.html Added Reference https://curl.se/docs/CVE-2025-0665.json Added Reference https://hackerone.com/reports/2954286