Skip to main content

Bootstrap Os CVE-2025-0665

HIGH
2025-02-05 2499f714-1537-4658-8207-48ae4bb9eae9
Mozilla Denial Of Service Use After Free Bootstrap Os H410c Firmware H700s Firmware H300s Firmware H410s Firmware Curl H500s Firmware Red Hat Suse
High
Disputed · 7.0 NVD
Share

Severity by source

Sources disagree (Low–High)
NVD PRIMARY
7.0 HIGH
AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
SUSE
6.5 MEDIUM
AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
Red Hat
4.0 LOW
qualitative

vuln.today treats the vendor’s rating as authoritative. A higher third-party CVSS (e.g. CISA-ADP) is shown for transparency but does not drive the headline severity.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
High

Lifecycle Timeline

4
Patch released
Mar 31, 2026 - 21:13 nvd
Patch available
Analysis Generated
Mar 17, 2026 - 20:45 vuln.today
PoC Detected
Mar 17, 2026 - 18:16 vuln.today
Public exploit code
CVE Published
Feb 05, 2025 - 10:15 nvd
HIGH 7.0

DescriptionCVE.org

libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve.

AnalysisAI

A double-close vulnerability exists in libcurl when tearing down connection channels after threaded name resolution, causing the same eventfd file descriptor to be closed twice. This affects curl version 8.11.1 and various NetApp products that bundle libcurl, potentially leading to file descriptor confusion, limited information disclosure, and high availability impact. A public proof-of-concept exploit is available (HackerOne report 2954286), and the vulnerability has a notably high EPSS score of 6.37% (91st percentile), indicating elevated real-world exploitation likelihood.

Technical ContextAI

This vulnerability affects libcurl, the widely-used library for transferring data with URLs, specifically when using threaded name resolution combined with eventfd file descriptors on Linux systems. The affected products include curl 8.11.1 directly (cpe:2.3:a:haxx:curl:8.11.1) and multiple NetApp storage firmware products (H300S, H410C, H410S, H500S, H700S) and Bootstrap OS that embed vulnerable libcurl versions. The double-close bug occurs during connection teardown after asynchronous DNS resolution completes, where the eventfd used for inter-thread communication is closed twice. This is a classic resource management error that can lead to file descriptor reuse vulnerabilities, where a newly opened file descriptor might inadvertently receive the same number as the double-closed descriptor, causing operations intended for one resource to affect another. While no specific CWE is assigned, this falls under improper resource shutdown or release patterns (similar to CWE-404 or CWE-675).

RemediationAI

Upgrade curl/libcurl to a patched version newer than 8.11.1 as detailed in the official curl security advisory at https://curl.se/docs/CVE-2025-0665.html. For NetApp product users, follow the specific remediation guidance provided in NetApp Security Advisory NTAP-20250306-0007 at https://security.netapp.com/advisory/ntap-20250306-0007/. Until patching is completed, consider disabling threaded name resolution in libcurl by using the synchronous resolver (c-ares or system resolver without threading) if operationally feasible, though this may impact performance for applications making many concurrent DNS lookups. Review system file descriptor limits and monitoring to detect potential double-close conditions manifesting as unexpected file descriptor exhaustion or application crashes. Prioritize patching for internet-facing systems and those processing untrusted data given the network attack vector and availability impact.

Vendor StatusVendor

SUSE

Severity: Medium
Product Status
Container containers/lmcache-lmstack-router:0.1.6-1.2 Container containers/lmcache-vllm-openai:0.3.2-1.2 Container containers/milvus:2.4.6-7.197 Container containers/pytorch:2.8.0-nvidia-3.6 Container containers/vllm-openai:0.9.1-1.2 Container private-registry/harbor-db:2.13.2_git56172457-4.12 Container private-registry/harbor-trivy-adapter:0.33.2-2.37 Container suse/manager/5.0/x86_64/server-hub-xmlrpc-api:5.0.5.1.6.26.1 Container suse/manager/5.0/x86_64/server-migration-14-16:5.0.6.7.29.1 Container trento/trento-wanda:2.0.0-build1.32.1 Container trento/trento-web:3.0.0-build4.55.1 Image SLES15-SP6-CHOST-BYOS-Aliyun Image SLES15-SP6-CHOST-BYOS-GDC Image SLES15-SP6-CHOST-BYOS-SAP-CCloud Image ai_15_6 Affected
Container containers/open-webui-mcpo:0.0.17-1.1 Container containers/open-webui-pipelines:0.20250819.030501-7.2 Container containers/open-webui:0.6.18-12.6 Container suse/manager/5.0/x86_64/proxy-httpd:5.0.5.1.7.26.2 Container suse/manager/5.0/x86_64/proxy-salt-broker:5.0.5.1.7.28.2 Container suse/manager/5.0/x86_64/server:5.0.5.1.7.33.2 Image SLES15-SP6 Image SLES15-SP6-Azure-3P Image SLES15-SP6-Azure-Basic Image SLES15-SP6-Azure-Standard Image SLES15-SP6-BYOS Image SLES15-SP6-BYOS-Azure Image SLES15-SP6-BYOS-EC2 Image SLES15-SP6-BYOS-GCE Image SLES15-SP6-CHOST-BYOS Image SLES15-SP6-CHOST-BYOS-Azure Image SLES15-SP6-CHOST-BYOS-EC2 Image SLES15-SP6-CHOST-BYOS-GCE Image SLES15-SP6-EC2 Image SLES15-SP6-EC2-ECS-HVM Image SLES15-SP6-GCE Image SLES15-SP6-HPC Image SLES15-SP6-HPC-Azure Image SLES15-SP6-HPC-BYOS Image SLES15-SP6-HPC-BYOS-Azure Image SLES15-SP6-HPC-BYOS-EC2 Image SLES15-SP6-HPC-BYOS-GCE Image SLES15-SP6-HPC-EC2 Image SLES15-SP6-HPC-GCE Image SLES15-SP6-Hardened-BYOS Image SLES15-SP6-Hardened-BYOS-Azure Image SLES15-SP6-Hardened-BYOS-EC2 Image SLES15-SP6-Hardened-BYOS-GCE Image SLES15-SP6-SAP-Azure-3P Image SLES15-SP6-SAP-Azure-LI-BYOS Image SLES15-SP6-SAP-Azure-LI-BYOS-Production Image SLES15-SP6-SAP-Azure-VLI-BYOS Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production Image SLES15-SP6-SAP-BYOS Image SLES15-SP6-SAP-BYOS-Azure Image SLES15-SP6-SAP-BYOS-EC2 Image SLES15-SP6-SAP-BYOS-GCE Image SLES15-SP6-SAP-Hardened Image SLES15-SP6-SAP-Hardened-Azure Image SLES15-SP6-SAP-Hardened-BYOS Image SLES15-SP6-SAP-Hardened-BYOS-Azure Image SLES15-SP6-SAP-Hardened-BYOS-EC2 Image SLES15-SP6-SAP-Hardened-BYOS-GCE Image SLES15-SP6-SAP-Hardened-EC2 Image SLES15-SP6-SAP-Hardened-GCE Affected
Container suse/sl-micro/6.0/baremetal-os-container:2.1.2-3.57 Container suse/sl-micro/6.0/kvm-os-container:2.1.2-3.51 Container suse/sl-micro/6.0/rt-os-container:2.1.2-4.25 Affected
Container suse/sl-micro/6.0/base-os-container:2.1.2-3.34 Container suse/sl-micro/6.0/toolbox:13.2-6.14 Image SL-Micro Image SLE-Micro Image SLE-Micro-Azure Image SLE-Micro-BYOS Image SLE-Micro-BYOS-Azure Image SLE-Micro-BYOS-EC2 Image SLE-Micro-BYOS-GCE Image SLE-Micro-EC2 Image SLE-Micro-GCE Affected
Container suse/sl-micro/6.1/baremetal-os-container:2.2.0-4.11 Container suse/sl-micro/6.1/kvm-os-container:2.2.0-4.9 Container suse/sl-micro/6.1/rt-os-container:2.2.0-4.10 Affected

Share

CVE-2025-0665 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy