AZL-56504
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-56504.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-56504
- Upstream
- Published
- 2025-02-05T10:15:22Z
- Modified
- 2026-04-01T05:18:54.733928Z
- Summary
- CVE-2025-0725 affecting package curl for versions less than 8.11.1-3
- Details
-
When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the
CURLOPT_ACCEPT_ENCODINGoption, using zlib 1.2.0.3 or older, an attacker-controlled integer overflow would make libcurl perform a buffer overflow. - References