When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has a `default` entry that omits both login and password. A rare circumstance.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the     password used for the first host to the followed-to host under certain circumstances. This flaw only     manifests itself if the netrc file has a `default` entry that omits both login and password. A rare     circumstance. (CVE-2025-0167)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the curl package has been released.

The version of the Tenable Identity Exposure running on the remote host is prior to 3.77.9. It is, therefore, affected by multiple vulnerabilities according to advisory TNS-2025-01, including the following:

  - libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel     after having completed a threaded name resolve. (CVE-2025-0665)

  - With the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker thread     is created. This is not limited only to workers but also exposes internal workers, where an instance     of them can be fetched, and its constructor can be grabbed and reinstated for malicious usage. This     vulnerability affects Permission Model users (--permission) on Node.js v20, v22, and v23. (CVE-2025-23083)

  - When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with     the CURLOPT_ACCEPT_ENCODING option, **using zlib 1.2.0.3 or older**, an attacker-controlled integer     overflow would make libcurl perform a buffer overflow. (CVE-2025-0725)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has a `default` entry that omits both login and password. A rare circumstance.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0372-1 advisory.

    - CVE-2025-0725: Fixed gzip integer overflow (bsc#1236590)
    - CVE-2025-0167: Fixed netrc and default credential leak (bsc#1236588)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0371-1 advisory.

    - CVE-2025-0725: Fixed gzip integer overflow (bsc#1236590)
    - CVE-2025-0167: Fixed netrc and default credential leak (bsc#1236588)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0369-1 advisory.

    - CVE-2025-0725: Fixed gzip integer overflow (bsc#1236590)
    - CVE-2025-0167: Fixed netrc and default credential leak (bsc#1236588)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0370-1 advisory.

    - CVE-2025-0725: Fixed gzip integer overflow (bsc#1236590)
    - CVE-2025-0167: Fixed netrc and default credential leak (bsc#1236588)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of curl installed on the remote host is prior to 8.12.0. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-036-01 advisory.

    New curl packages are available for Slackware 15.0 and -current to fix security issues.

Tenable has extracted the preceding description block directly from the curl security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
231674	Linux Distros Unpatched Vulnerability : CVE-2025-0167	Nessus	Misc.	low
216876	Photon OS 5.0: Curl PHSA-2025-5.0-0479	Nessus	PhotonOS Local Security Checks	medium
215200	Tenable Identity Exposure < 3.77.9 Multiple Vulnerabilities (TNS-2025-01)	Nessus	Windows	medium
215221	Curl 7.76.0 < 8.12.0 Default Credential Leak (CVE-2025-0167)	Nessus	Misc.	low
215180	SUSE SLES15 Security Update : curl (SUSE-SU-2025:0372-1)	Nessus	SuSE Local Security Checks	high
215177	SUSE SLES12 Security Update : curl (SUSE-SU-2025:0371-1)	Nessus	SuSE Local Security Checks	high
215174	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : curl (SUSE-SU-2025:0369-1)	Nessus	SuSE Local Security Checks	high
215169	SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2025:0370-1)	Nessus	SuSE Local Security Checks	high
215042	Slackware Linux 15.0 / current curl Multiple Vulnerabilities (SSA:2025-036-01)	Nessus	Slackware Local Security Checks	critical

Detections

Analytics

CVE-2025-0167

low

Tenable Plugins

low

medium

medium

low

high

high

high

high

critical