Sploitus

CVE-2025-0167

No indexed exploits for CVE-2025-0167 yet

When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has a `default` entry that omits both login and password. A rare circumstance.

Affected products
Alt Linux, Astra Linux, Debian, Ibm Aix, Linuxmint, Red Os, Suse, Ubuntu
Haxx Curl
< 8.12.0
CVSS 3.1
3.4 LOW
EPSS
0.7% (48th percentile)
NVD status
Analyzed
Published
2025-02-05
CVE-2025-0167 at NVD
Authoritative description, scoring and affected products

No indexed exploits for CVE-2025-0167 yet

Our index is partial: it proves presence, never absence

No exploit for CVE-2025-0167 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.