CVE-2025-10966 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2025-10966 Interim 1 1 2025-12-23T00:49:55Z current 2025-12-23T00:49:55Z 2025-12-23T00:49:55Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2025-10966 curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms. This prevents curl from detecting MITM attackers and more. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SLES-LTSS-TERADATA 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise High Performance Computing 15 SP4 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Micro 5.5 SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5-LTSS SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server 15 SP4 SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server 15 SP5-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server Teradata 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Micro 6.0 SUSE Linux Micro 6.1 SUSE Manager Proxy 4.3 SUSE Manager Proxy LTS 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Retail Branch Server LTS 4.3 SUSE Manager Server 4.3 SUSE Manager Server LTS 4.3 openSUSE Leap 15.6 openSUSE Tumbleweed curl curl-8.17.0-1.1 curl-fish-completion-8.17.0-1.1 curl-zsh-completion-8.17.0-1.1 libcurl-devel libcurl-devel-32bit libcurl-devel-32bit-8.17.0-1.1 libcurl-devel-8.17.0-1.1 libcurl-devel-doc-8.17.0-1.1 libcurl4 libcurl4-32bit libcurl4-32bit-8.17.0-1.1 libcurl4-8.17.0-1.1 wcurl-8.17.0-1.1 curl-8.17.0-1.1 as a component of openSUSE Tumbleweed curl-fish-completion-8.17.0-1.1 as a component of openSUSE Tumbleweed curl-zsh-completion-8.17.0-1.1 as a component of openSUSE Tumbleweed libcurl-devel-8.17.0-1.1 as a component of openSUSE Tumbleweed libcurl-devel-32bit-8.17.0-1.1 as a component of openSUSE Tumbleweed libcurl-devel-doc-8.17.0-1.1 as a component of openSUSE Tumbleweed libcurl4-8.17.0-1.1 as a component of openSUSE Tumbleweed libcurl4-32bit-8.17.0-1.1 as a component of openSUSE Tumbleweed wcurl-8.17.0-1.1 as a component of openSUSE Tumbleweed curl as a component of SLES-LTSS-TERADATA 15 SP2 curl as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libcurl-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libcurl4 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libcurl4-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS curl as a component of SUSE Linux Enterprise High Performance Computing 15 SP4 curl as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS libcurl-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS libcurl4 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS libcurl4-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS curl as a component of SUSE Linux Enterprise High Performance Computing 15 SP5 curl as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS libcurl-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS libcurl4 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS libcurl4-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS curl as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS libcurl-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS libcurl4 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS libcurl4-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS curl as a component of SUSE Linux Enterprise Micro 5.1 libcurl4 as a component of SUSE Linux Enterprise Micro 5.1 curl as a component of SUSE Linux Enterprise Micro 5.2 libcurl4 as a component of SUSE Linux Enterprise Micro 5.2 curl as a component of SUSE Linux Enterprise Micro 5.3 libcurl4 as a component of SUSE Linux Enterprise Micro 5.3 curl as a component of SUSE Linux Enterprise Micro 5.4 libcurl4 as a component of SUSE Linux Enterprise Micro 5.4 curl as a component of SUSE Linux Enterprise Micro 5.5 libcurl4 as a component of SUSE Linux Enterprise Micro 5.5 curl as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libcurl-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libcurl4 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 libcurl4-32bit as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 curl as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 libcurl-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 libcurl4 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 libcurl4-32bit as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 curl as a component of SUSE Linux Enterprise Server 11 SP4 LTSS curl as a component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE curl as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libcurl4 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libcurl4-32bit as a component of SUSE Linux Enterprise Server 12 SP2-LTSS curl as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libcurl4 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libcurl4-32bit as a component of SUSE Linux Enterprise Server 12 SP4-LTSS curl as a component of SUSE Linux Enterprise Server 12 SP5-LTSS libcurl-devel as a component of SUSE Linux Enterprise Server 12 SP5-LTSS libcurl4 as a component of SUSE Linux Enterprise Server 12 SP5-LTSS libcurl4-32bit as a component of SUSE Linux Enterprise Server 12 SP5-LTSS curl as a component of SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security curl as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libcurl-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libcurl4 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libcurl4-32bit as a component of SUSE Linux Enterprise Server 15 SP1-LTSS curl as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libcurl-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libcurl4 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libcurl4-32bit as a component of SUSE Linux Enterprise Server 15 SP2-LTSS curl as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libcurl-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libcurl4 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libcurl4-32bit as a component of SUSE Linux Enterprise Server 15 SP3-LTSS curl as a component of SUSE Linux Enterprise Server 15 SP4 curl as a component of SUSE Linux Enterprise Server 15 SP4-LTSS libcurl-devel as a component of SUSE Linux Enterprise Server 15 SP4-LTSS libcurl4 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS libcurl4-32bit as a component of SUSE Linux Enterprise Server 15 SP4-LTSS curl as a component of SUSE Linux Enterprise Server 15 SP5 curl as a component of SUSE Linux Enterprise Server 15 SP5-LTSS libcurl-devel as a component of SUSE Linux Enterprise Server 15 SP5-LTSS libcurl4 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS libcurl4-32bit as a component of SUSE Linux Enterprise Server 15 SP5-LTSS curl as a component of SUSE Linux Enterprise Server 15-LTSS libcurl-devel as a component of SUSE Linux Enterprise Server 15-LTSS libcurl4 as a component of SUSE Linux Enterprise Server 15-LTSS libcurl4-32bit as a component of SUSE Linux Enterprise Server 15-LTSS curl as a component of SUSE Linux Enterprise Server Teradata 12 SP3 curl as a component of SUSE Linux Enterprise Server Teradata 15 SP4 curl as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libcurl-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libcurl4 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libcurl4-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 curl as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 libcurl-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 libcurl4 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 libcurl4-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 curl as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 libcurl-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 libcurl4 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 libcurl4-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 curl as a component of SUSE Linux Micro 6.0 libcurl4 as a component of SUSE Linux Micro 6.0 curl as a component of SUSE Linux Micro 6.1 libcurl4 as a component of SUSE Linux Micro 6.1 curl as a component of SUSE Manager Proxy 4.3 libcurl-devel as a component of SUSE Manager Proxy 4.3 libcurl4 as a component of SUSE Manager Proxy 4.3 libcurl4-32bit as a component of SUSE Manager Proxy 4.3 curl as a component of SUSE Manager Proxy LTS 4.3 libcurl-devel as a component of SUSE Manager Proxy LTS 4.3 libcurl4 as a component of SUSE Manager Proxy LTS 4.3 libcurl4-32bit as a component of SUSE Manager Proxy LTS 4.3 curl as a component of SUSE Manager Retail Branch Server 4.3 libcurl-devel as a component of SUSE Manager Retail Branch Server 4.3 libcurl4 as a component of SUSE Manager Retail Branch Server 4.3 libcurl4-32bit as a component of SUSE Manager Retail Branch Server 4.3 curl as a component of SUSE Manager Retail Branch Server LTS 4.3 libcurl-devel as a component of SUSE Manager Retail Branch Server LTS 4.3 libcurl4 as a component of SUSE Manager Retail Branch Server LTS 4.3 libcurl4-32bit as a component of SUSE Manager Retail Branch Server LTS 4.3 curl as a component of SUSE Manager Server 4.3 libcurl-devel as a component of SUSE Manager Server 4.3 libcurl4 as a component of SUSE Manager Server 4.3 libcurl4-32bit as a component of SUSE Manager Server 4.3 curl as a component of SUSE Manager Server LTS 4.3 libcurl-devel as a component of SUSE Manager Server LTS 4.3 libcurl4 as a component of SUSE Manager Server LTS 4.3 libcurl4-32bit as a component of SUSE Manager Server LTS 4.3 curl as a component of openSUSE Leap 15.6 libcurl-devel as a component of openSUSE Leap 15.6 libcurl-devel-32bit as a component of openSUSE Leap 15.6 libcurl4 as a component of openSUSE Leap 15.6 libcurl4-32bit as a component of openSUSE Leap 15.6 curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms. This prevents curl from detecting MITM attackers and more. CVE-2025-10966 openSUSE Tumbleweed:curl-8.17.0-1.1 openSUSE Tumbleweed:curl-fish-completion-8.17.0-1.1 openSUSE Tumbleweed:curl-zsh-completion-8.17.0-1.1 openSUSE Tumbleweed:libcurl-devel-8.17.0-1.1 openSUSE Tumbleweed:libcurl-devel-32bit-8.17.0-1.1 openSUSE Tumbleweed:libcurl-devel-doc-8.17.0-1.1 openSUSE Tumbleweed:libcurl4-8.17.0-1.1 openSUSE Tumbleweed:libcurl4-32bit-8.17.0-1.1 openSUSE Tumbleweed:wcurl-8.17.0-1.1 SLES-LTSS-TERADATA 15 SP2:curl SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:curl SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libcurl-devel SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libcurl4 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libcurl4-32bit SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:curl SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl-devel SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libcurl4-32bit SUSE Linux Enterprise High Performance Computing 15 SP4:curl SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:curl SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl-devel SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libcurl4-32bit SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:curl SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl-devel SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libcurl4-32bit SUSE Linux Enterprise High Performance Computing 15 SP5:curl SUSE Linux Enterprise Micro 5.1:curl SUSE Linux Enterprise Micro 5.1:libcurl4 SUSE Linux Enterprise Micro 5.2:curl SUSE Linux Enterprise Micro 5.2:libcurl4 SUSE Linux Enterprise Micro 5.3:curl SUSE Linux Enterprise Micro 5.3:libcurl4 SUSE Linux Enterprise Micro 5.4:curl SUSE Linux Enterprise Micro 5.4:libcurl4 SUSE Linux Enterprise Micro 5.5:curl SUSE Linux Enterprise Micro 5.5:libcurl4 SUSE Linux Enterprise Module for Basesystem 15 SP6:curl SUSE Linux Enterprise Module for Basesystem 15 SP6:libcurl-devel SUSE Linux Enterprise Module for Basesystem 15 SP6:libcurl4 SUSE Linux Enterprise Module for Basesystem 15 SP6:libcurl4-32bit SUSE Linux Enterprise Module for Basesystem 15 SP7:curl SUSE Linux Enterprise Module for Basesystem 15 SP7:libcurl-devel SUSE Linux Enterprise Module for Basesystem 15 SP7:libcurl4 SUSE Linux Enterprise Module for Basesystem 15 SP7:libcurl4-32bit SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:curl SUSE Linux Enterprise Server 11 SP4 LTSS:curl SUSE Linux Enterprise Server 12 SP2-LTSS:curl SUSE Linux Enterprise Server 12 SP2-LTSS:libcurl4 SUSE Linux Enterprise Server 12 SP2-LTSS:libcurl4-32bit SUSE Linux Enterprise Server 12 SP4-LTSS:curl SUSE Linux Enterprise Server 12 SP4-LTSS:libcurl4 SUSE Linux Enterprise Server 12 SP4-LTSS:libcurl4-32bit SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security:curl SUSE Linux Enterprise Server 12 SP5-LTSS:curl SUSE Linux Enterprise Server 12 SP5-LTSS:libcurl-devel SUSE Linux Enterprise Server 12 SP5-LTSS:libcurl4 SUSE Linux Enterprise Server 12 SP5-LTSS:libcurl4-32bit SUSE Linux Enterprise Server 15 SP1-LTSS:curl SUSE Linux Enterprise Server 15 SP1-LTSS:libcurl-devel SUSE Linux Enterprise Server 15 SP1-LTSS:libcurl4 SUSE Linux Enterprise Server 15 SP1-LTSS:libcurl4-32bit SUSE Linux Enterprise Server 15 SP2-LTSS:curl SUSE Linux Enterprise Server 15 SP2-LTSS:libcurl-devel SUSE Linux Enterprise Server 15 SP2-LTSS:libcurl4 SUSE Linux Enterprise Server 15 SP2-LTSS:libcurl4-32bit SUSE Linux Enterprise Server 15 SP3-LTSS:curl SUSE Linux Enterprise Server 15 SP3-LTSS:libcurl-devel SUSE Linux Enterprise Server 15 SP3-LTSS:libcurl4 SUSE Linux Enterprise Server 15 SP3-LTSS:libcurl4-32bit SUSE Linux Enterprise Server 15 SP4-LTSS:curl SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl-devel SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4 SUSE Linux Enterprise Server 15 SP4-LTSS:libcurl4-32bit SUSE Linux Enterprise Server 15 SP4:curl SUSE Linux Enterprise Server 15 SP5-LTSS:curl SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl-devel SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4 SUSE Linux Enterprise Server 15 SP5-LTSS:libcurl4-32bit SUSE Linux Enterprise Server 15 SP5:curl SUSE Linux Enterprise Server 15-LTSS:curl SUSE Linux Enterprise Server 15-LTSS:libcurl-devel SUSE Linux Enterprise Server 15-LTSS:libcurl4 SUSE Linux Enterprise Server 15-LTSS:libcurl4-32bit SUSE Linux Enterprise Server Teradata 12 SP3:curl SUSE Linux Enterprise Server Teradata 15 SP4:curl SUSE Linux Enterprise Server for SAP Applications 15 SP3:curl SUSE Linux Enterprise Server for SAP Applications 15 SP3:libcurl-devel SUSE Linux Enterprise Server for SAP Applications 15 SP3:libcurl4 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libcurl4-32bit SUSE Linux Enterprise Server for SAP Applications 15 SP4:curl SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl-devel SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4 SUSE Linux Enterprise Server for SAP Applications 15 SP4:libcurl4-32bit SUSE Linux Enterprise Server for SAP Applications 15 SP5:curl SUSE Linux Enterprise Server for SAP Applications 15 SP5:libcurl-devel SUSE Linux Enterprise Server for SAP Applications 15 SP5:libcurl4 SUSE Linux Enterprise Server for SAP Applications 15 SP5:libcurl4-32bit SUSE Linux Micro 6.0:curl SUSE Linux Micro 6.0:libcurl4 SUSE Linux Micro 6.1:curl SUSE Linux Micro 6.1:libcurl4 SUSE Manager Proxy 4.3:curl SUSE Manager Proxy 4.3:libcurl-devel SUSE Manager Proxy 4.3:libcurl4 SUSE Manager Proxy 4.3:libcurl4-32bit SUSE Manager Proxy LTS 4.3:curl SUSE Manager Proxy LTS 4.3:libcurl-devel SUSE Manager Proxy LTS 4.3:libcurl4 SUSE Manager Proxy LTS 4.3:libcurl4-32bit SUSE Manager Retail Branch Server 4.3:curl SUSE Manager Retail Branch Server 4.3:libcurl-devel SUSE Manager Retail Branch Server 4.3:libcurl4 SUSE Manager Retail Branch Server 4.3:libcurl4-32bit SUSE Manager Retail Branch Server LTS 4.3:curl SUSE Manager Retail Branch Server LTS 4.3:libcurl-devel SUSE Manager Retail Branch Server LTS 4.3:libcurl4 SUSE Manager Retail Branch Server LTS 4.3:libcurl4-32bit SUSE Manager Server 4.3:curl SUSE Manager Server 4.3:libcurl-devel SUSE Manager Server 4.3:libcurl4 SUSE Manager Server 4.3:libcurl4-32bit SUSE Manager Server LTS 4.3:curl SUSE Manager Server LTS 4.3:libcurl-devel SUSE Manager Server LTS 4.3:libcurl4 SUSE Manager Server LTS 4.3:libcurl4-32bit openSUSE Leap 15.6:curl openSUSE Leap 15.6:libcurl-devel openSUSE Leap 15.6:libcurl-devel-32bit openSUSE Leap 15.6:libcurl4 openSUSE Leap 15.6:libcurl4-32bit moderate 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N