7.0
Élevée
CVE-2025-0665 libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having…
Description
libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| curl | 8.11.1 | Pas de correctif indiqué |
| RUGGEDCOM RST2428P 3.3 | premières → < 3.3 | 3.3 |
| SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family 3.3 | premières → < 3.3 | 3.3 |
| SCALANCE XCH328 3.3 | premières → < 3.3 | 3.3 |
| SCALANCE XCM324 3.3 | premières → < 3.3 | 3.3 |
| SCALANCE XCM328 3.3 | premières → < 3.3 | 3.3 |
| SCALANCE XCM332 3.3 | premières → < 3.3 | 3.3 |
| SCALANCE XRH334 (24 V DC, 8xFO, CC) 3.3 | premières → < 3.3 | 3.3 |
| SCALANCE XRM334 (230 V AC, 12xFO) 3.3 | premières → < 3.3 | 3.3 |
Afficher les 11 autres branches Masquer les 11 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SCALANCE XRM334 (230 V AC, 8xFO) 3.3 | premières → < 3.3 | 3.3 |
| SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) 3.3 | premières → < 3.3 | 3.3 |
| SCALANCE XRM334 (24 V DC, 12xFO) 3.3 | premières → < 3.3 | 3.3 |
| SCALANCE XRM334 (24 V DC, 8xFO) 3.3 | premières → < 3.3 | 3.3 |
| SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) 3.3 | premières → < 3.3 | 3.3 |
| SCALANCE XRM334 (2x230 V AC, 12xFO) 3.3 | premières → < 3.3 | 3.3 |
| SCALANCE XRM334 (2x230 V AC, 8xFO) 3.3 | premières → < 3.3 | 3.3 |
| SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) 3.3 | premières → < 3.3 | 3.3 |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
Autres CVE de curl
Les 98 CVE de curl →
CVE-2026-107929
When `CURLOPT_INTERFACE` (or the command line tool's `--interface` option) is set with one of the documented prefixes…
8.1
Élevée
CVE-2026-107928
When curl is built with GnuTLS, a malicious WebSocket server can make curl
send memory past its send buffer
8.1
Élevée
CVE-2026-94266
libcurl could accidentally return a URL for `curl_easy_getinfo()`'s `CURLINFO_EFFECTIVE_URL` option containing…
7.5
Élevée
CVE-2026-94265
When processing an HTTP redirect to a URL containing userinfo (a `username:password` component), curl might…
9.1
Critique