CVE-2025-15467

CVE-2025-15467: OpenSSL CMS AuthEnvelopedData 스택 버퍼 오버플로우 개요 CVE-2025-15467 는 OpenSSL의 CMS암호화 메시지 구문 파싱 코드에서 발견된 치명적인 스택 버퍼 오버플로우 취약점입니다. 이 취약점은 CMS AuthEnvelopedData 구조에서 AES-GCM 초기화 벡터IV를 처리할 때 evpciphergetasn1aeadparams 함수에 존재합니다. 속성| 값 ---|--- CVE ID| CVE-2025-15467 심각도| 높음 CVSS| 8.1+ 영향받는 버전...

SUSE CVE-2025-15467

Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote code execution. When parsing CMS...

CVE-2025-15467 Stack buffer overflow in CMS (Auth)EnvelopedData parsing

Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote code execution. When parsing CMS...

OpenSSL security vulnerabilities

OpenSSL is an open-source encryption library developed by the OpenSSL team that enables secure implementation of Secure Sockets Layer SSLv2/v3 and Secure Transport Layer TLSv1 protocols. This product supports various encryption algorithms, including symmetric ciphers, hash algorithms, and secure...