{"id":"CURL-CVE-2025-0665","summary":"eventfd double close","details":"libcurl would wrongly close the same eventfd file descriptor twice when taking\ndown a connection channel after having completed a threaded name resolve.","aliases":["CVE-2025-0665"],"modified":"2026-04-25T20:22:29.080429Z","published":"2025-02-05T08:00:00Z","database_specific":{"URL":"https://curl.se/docs/CVE-2025-0665.json","award":{"currency":"USD","amount":"505"},"package":"curl","issue":"https://hackerone.com/reports/2954286","CWE":{"desc":"Multiple Releases of Same Resource or Handle","id":"CWE-1341"},"www":"https://curl.se/docs/CVE-2025-0665.html","severity":"Low","last_affected":"8.11.1","affects":"both"},"affected":[{"ranges":[{"type":"SEMVER","events":[{"introduced":"8.11.1"},{"fixed":"8.12.0"}]},{"type":"GIT","repo":"https://github.com/curl/curl.git","events":[{"introduced":"92124838c6b7e09e3f35ff84e1eb63cf0105c9b5"},{"fixed":"ff5091aa9f73802e894b1cbdf24ab84e103200e2"}]}],"versions":["8.11.1"],"database_specific":{"vanir_signatures":[{"target":{"file":"lib/asyn-thread.c","function":"destroy_thread_sync_data"},"signature_type":"Function","source":"https://github.com/curl/curl.git/commit/ff5091aa9f73802e894b1cbdf24ab84e103200e2","digest":{"length":386,"function_hash":"330746453560057327595202474110269703424"},"id":"CURL-CVE-2025-0665-8a1d0519","signature_version":"v1","deprecated":false},{"target":{"file":"lib/asyn-thread.c"},"signature_type":"Line","source":"https://github.com/curl/curl.git/commit/ff5091aa9f73802e894b1cbdf24ab84e103200e2","digest":{"line_hashes":["332922935470749792573867805379503604001","270402022324605171628271509787427407970","325748360549732944034300747162180532004","82281272682367692068585845682578917187","198747049406871451145987131241229838375","294513380310706942675812105694619897334"],"threshold":0.9},"id":"CURL-CVE-2025-0665-f8e1c049","signature_version":"v1","deprecated":false}],"source":"https://curl.se/docs/CURL-CVE-2025-0665.json","vanir_signatures_modified":"2026-04-25T20:22:29Z"}}],"schema_version":"1.7.5","credits":[{"name":"Christian Heusel","type":"FINDER"},{"name":"Andy Pan","type":"REMEDIATION_DEVELOPER"}]}