CVE-2025-0725 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, **using zlib 1.2.0.3…
High CVSS: 7.3

CVE-2025-0725

When libcurl is asked to perform automatic gzip decompression of
content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option,
**using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would
make libcurl perform a buffer overflow.
Vendor
Netapp
Product
Hci Baseboard Management Controller
CWE
CWE-120
Yayın Tarihi
2025-02-05 10:15:22
Güncelleme
2025-06-27 19:24:08
Source Identifier
2499f714-1537-4658-8207-48ae4bb9eae9
KEV Date Added
-

Kategoriler

CWE-120 Hci Baseboard Management Controller HIGH Netapp 2025

Referanslar

https://curl.se/docs/CVE-2025-0725.html https://curl.se/docs/CVE-2025-0725.json https://hackerone.com/reports/2956023 http://www.openwall.com/lists/oss-security/2025/02/05/3 http://www.openwall.com/lists/oss-security/2025/02/06/2 http://www.openwall.com/lists/oss-security/2025/02/06/4 https://github.com/curl/curl/commit/76f83f0db23846e254d940ec7 https://security.netapp.com/advisory/ntap-20250306-0009/