When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, **using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would make libcurl perform a buffer overflow.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the     `CURLOPT_ACCEPT_ENCODING` option, **using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow     would make libcurl perform a buffer overflow. (CVE-2025-0725)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of mysql installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-0725 advisory.

  - When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the     `CURLOPT_ACCEPT_ENCODING` option, **using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow     would make libcurl perform a buffer overflow. (CVE-2025-0725)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of the Tenable Identity Exposure running on the remote host is prior to 3.77.9. It is, therefore, affected by multiple vulnerabilities according to advisory TNS-2025-01, including the following:

  - libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel     after having completed a threaded name resolve. (CVE-2025-0665)

  - With the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker thread     is created. This is not limited only to workers but also exposes internal workers, where an instance     of them can be fetched, and its constructor can be grabbed and reinstated for malicious usage. This     vulnerability affects Permission Model users (--permission) on Node.js v20, v22, and v23. (CVE-2025-23083)

  - When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with     the CURLOPT_ACCEPT_ENCODING option, **using zlib 1.2.0.3 or older**, an attacker-controlled integer     overflow would make libcurl perform a buffer overflow. (CVE-2025-0725)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-0725 advisory.

  - When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the     `CURLOPT_ACCEPT_ENCODING` option, **using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow     would make libcurl perform a buffer overflow. (CVE-2025-0725)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, **using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would make libcurl perform a buffer overflow.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0372-1 advisory.

    - CVE-2025-0725: Fixed gzip integer overflow (bsc#1236590)
    - CVE-2025-0167: Fixed netrc and default credential leak (bsc#1236588)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0371-1 advisory.

    - CVE-2025-0725: Fixed gzip integer overflow (bsc#1236590)
    - CVE-2025-0167: Fixed netrc and default credential leak (bsc#1236588)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0369-1 advisory.

    - CVE-2025-0725: Fixed gzip integer overflow (bsc#1236590)
    - CVE-2025-0167: Fixed netrc and default credential leak (bsc#1236588)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0370-1 advisory.

    - CVE-2025-0725: Fixed gzip integer overflow (bsc#1236590)
    - CVE-2025-0167: Fixed netrc and default credential leak (bsc#1236588)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of curl installed on the remote host is prior to 8.12.0. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-036-01 advisory.

    New curl packages are available for Slackware 15.0 and -current to fix security issues.

Tenable has extracted the preceding description block directly from the curl security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
230690	Linux Distros Unpatched Vulnerability : CVE-2025-0725	Nessus	Misc.	high
216625	Azure Linux 3.0 Security Update: mysql (CVE-2025-0725)	Nessus	Azure Linux Local Security Checks	high
215200	Tenable Identity Exposure < 3.77.9 Multiple Vulnerabilities (TNS-2025-01)	Nessus	Windows	medium
216281	CBL Mariner 2.0 Security Update: mysql (CVE-2025-0725)	Nessus	MarinerOS Local Security Checks	high
215220	Curl 7.10.5 < 8.12.0 Integer Overflow (CVE-2025-0725)	Nessus	Misc.	high
215180	SUSE SLES15 Security Update : curl (SUSE-SU-2025:0372-1)	Nessus	SuSE Local Security Checks	high
215177	SUSE SLES12 Security Update : curl (SUSE-SU-2025:0371-1)	Nessus	SuSE Local Security Checks	high
215174	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : curl (SUSE-SU-2025:0369-1)	Nessus	SuSE Local Security Checks	high
215169	SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2025:0370-1)	Nessus	SuSE Local Security Checks	high
215042	Slackware Linux 15.0 / current curl Multiple Vulnerabilities (SSA:2025-036-01)	Nessus	Slackware Local Security Checks	critical

Detections

Analytics

CVE-2025-0725

high

Tenable Plugins

high

high

medium

high

high

high

high

high

high

critical