CVE-2025-0725

Published: Feb 5, 2025Modified: Jun 17, 2026

7.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Exploitability: 3.9 / Impact: 3.4

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, **using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would make libcurl perform a buffer overflow.

Affected (8)

Products: Netapp: Hci Baseboard Management Controller, Hci H610s Firmware, Hci H610c Firmware, Hci H615c Firmware, Solidfire & Hci Management Node, Solidfire & Hci Storage Node · Haxx: Curl, Libcurl

6 products

Hci Baseboard Management Controller

Hci H610s Firmware

Hci H610c Firmware

Hci H615c Firmware

Solidfire & Hci Management Node

Solidfire & Hci Storage Node

2 products

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Netapp Hci Baseboard Management Controller	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Hci H610s Firmware	All versions

Running on/with	Platform Versions
Netapp Hci H610s	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Hci H610c Firmware	All versions

Running on/with	Platform Versions
Netapp Hci H610c	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Hci H615c Firmware	All versions

Running on/with	Platform Versions
Netapp Hci H615c	All versions

Configuration E

2 vulnerable

Vulnerable Software	Affected Versions
Netapp Solidfire & Hci Management Node	All versions
Netapp Solidfire & Hci Storage Node	All versions

Configuration F

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Haxx Curl	From 7.10.5 to 8.12.0
Haxx Libcurl	From 7.10.5 to 8.12.0

Running on/with	Platform Versions
Zlib Zlib	Up to 1.2.0.3

Related CWEs

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (8)

https://curl.se/docs/CVE-2025-0725.html

Source: 2499f714-1537-4658-8207-48ae4bb9eae9

Vendor Advisory

https://curl.se/docs/CVE-2025-0725.json

Source: 2499f714-1537-4658-8207-48ae4bb9eae9

Vendor Advisory

https://hackerone.com/reports/2956023

Source: 2499f714-1537-4658-8207-48ae4bb9eae9

ExploitIssue Tracking

http://www.openwall.com/lists/oss-security/2025/02/05/3

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://www.openwall.com/lists/oss-security/2025/02/06/2

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://www.openwall.com/lists/oss-security/2025/02/06/4

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

https://github.com/curl/curl/commit/76f83f0db23846e254d940ec7

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://security.netapp.com/advisory/ntap-20250306-0009/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.