CVE-2025-10966
ADVISORY - nistSummary
curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms.
This prevents curl from detecting MITM attackers and more.
EPSS Score: 0.00015 (0.025)
Common Weakness Enumeration (CWE)
ADVISORY - nist
ADVISORY - redhat
Key Exchange without Entity Authentication
Alpine
CREATED
UPDATED
ADVISORY IDCVE-2025-10966
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
| Package | Type | OS Name | OS Version | Affected Ranges | Fix Versions |
|---|---|---|---|---|---|
| alpine/curl | apk | alpine | 3.21 | <=8.12.1-r1 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=7.36.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=7.50.1-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=7.50.2-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=7.50.3-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=7.51.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=7.52.1-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=7.53.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=7.53.1-r2 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=7.54.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=7.55.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=7.56.1-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=7.57.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=7.59.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=7.60.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=7.61.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=7.61.1-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=7.62.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=7.64.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=7.65.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=7.66.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=7.71.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=7.72.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=7.74.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=7.76.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=7.77.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=7.78.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=7.79.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=7.83.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=7.83.1-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=7.84.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=7.85.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=7.86.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=7.87.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=7.88.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=8.0.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=8.1.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=8.10.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=8.11.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=8.11.1-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=8.12.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=8.14.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=8.14.1-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=8.14.1-r1 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=8.14.1-r2 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=8.3.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=8.4.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=8.5.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=8.6.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=8.7.1-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=8.9.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.22 | <=8.9.1-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=7.36.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=7.50.1-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=7.50.2-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=7.50.3-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=7.51.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=7.52.1-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=7.53.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=7.53.1-r2 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=7.54.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=7.55.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=7.56.1-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=7.57.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=7.59.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=7.60.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=7.61.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=7.61.1-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=7.62.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=7.64.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=7.65.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=7.66.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=7.71.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=7.72.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=7.74.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=7.76.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=7.77.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=7.78.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=7.79.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=7.83.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=7.83.1-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=7.84.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=7.85.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=7.86.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=7.87.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=7.88.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=8.0.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=8.1.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=8.10.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=8.11.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=8.11.0-r2 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=8.11.1-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=8.11.1-r1 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=8.12.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=8.12.1-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=8.14.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=8.14.1-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=8.14.1-r2 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=8.3.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=8.4.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=8.5.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=8.6.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=8.7.1-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=8.9.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.20 | <=8.9.1-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.24 | <8.17.0-r0 | 8.17.0-r0 |
| alpine/curl | apk | alpine | edge | <8.17.0-r0 | 8.17.0-r0 |
| alpine/curl | apk | alpine | 3.21 | <=7.36.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=7.50.1-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=7.50.2-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=7.50.3-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=7.51.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=7.52.1-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=7.53.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=7.53.1-r2 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=7.54.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=7.55.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=7.56.1-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=7.57.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=7.59.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=7.60.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=7.61.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=7.61.1-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=7.62.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=7.64.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=7.65.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=7.66.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=7.71.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=7.72.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=7.74.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=7.76.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=7.77.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=7.78.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=7.79.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=7.83.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=7.83.1-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=7.84.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=7.85.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=7.86.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=7.87.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=7.88.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=8.0.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=8.1.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=8.10.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=8.11.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=8.11.0-r2 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=8.11.1-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=8.11.1-r1 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=8.12.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=8.12.1-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=8.14.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=8.14.1-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=8.14.1-r2 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=8.3.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=8.4.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=8.5.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=8.6.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=8.7.1-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=8.9.0-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.21 | <=8.9.1-r0 | Not yet available |
| alpine/curl | apk | alpine | 3.23 | <8.17.0-r0 | 8.17.0-r0 |
Severity and metrics
No CVSS data available from this advisory.
NIST
CREATED
UPDATED
ADVISORY IDCVE-2025-10966
EXPLOITABILITY SCORE
2.8
EXPLOITS FOUND
COMMON WEAKNESS ENUMERATION (CWE)
CVSS SCORE
4.3mediumDebian
CREATED
UPDATED
ADVISORY IDCVE-2025-10966
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
N/AlowUbuntu
CREATED
UPDATED
ADVISORY IDCVE-2025-10966
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
N/AlowAmazon
CREATED
UPDATED
ADVISORY IDALAS2023-2025-1351
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
N/AmediumRed Hat
CREATED
UPDATED
ADVISORY IDCVE-2025-10966
EXPLOITABILITY SCORE
2.2
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
CVSS SCORE
5.9mediumminimos
CREATED
UPDATED
ADVISORY ID
MINI-wjwx-mxp5-69f6
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-