libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve.

The version of the Tenable Identity Exposure running on the remote host is prior to 3.77.9. It is, therefore, affected by multiple vulnerabilities according to advisory TNS-2025-01, including the following:

  - libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel     after having completed a threaded name resolve. (CVE-2025-0665)

  - With the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker thread     is created. This is not limited only to workers but also exposes internal workers, where an instance     of them can be fetched, and its constructor can be grabbed and reinstated for malicious usage. This     vulnerability affects Permission Model users (--permission) on Node.js v20, v22, and v23. (CVE-2025-23083)

  - When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with     the CURLOPT_ACCEPT_ENCODING option, **using zlib 1.2.0.3 or older**, an attacker-controlled integer     overflow would make libcurl perform a buffer overflow. (CVE-2025-0725)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of curl installed on the remote host is prior to 8.12.0. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-036-01 advisory.

    New curl packages are available for Slackware 15.0 and -current to fix security issues.

Tenable has extracted the preceding description block directly from the curl security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
215200	Tenable Identity Exposure < 3.77.9 Multiple Vulnerabilities (TNS-2025-01)	Nessus	Windows	medium
215219	Curl < 8.12.0 Double Close (CVE-2025-0665)	Nessus	Misc.	critical
215042	Slackware Linux 15.0 / current curl Multiple Vulnerabilities (SSA:2025-036-01)	Nessus	Slackware Local Security Checks	critical

Detections

Analytics

CVE-2025-0665

critical

Tenable Plugins

medium

critical

critical