CVE-2025-15467

CVE-2025-15467: OpenSSL CMS AuthEnvelopedData 스택 버퍼 오버플로우 개요 CVE-2025-15467 는 OpenSSL의 CMS암호화 메시지 구문 파싱 코드에서 발견된 치명적인 스택 버퍼 오버플로우 취약점입니다. 이 취약점은 CMS AuthEnvelopedData 구조에서 AES-GCM 초기화 벡터IV를 처리할 때 evpciphergetasn1aeadparams 함수에 존재합니다. 속성| 값 ---|--- CVE ID| CVE-2025-15467 심각도| 높음 CVSS| 8.1+ 영향받는 버전...

gpgsm-cve-2026-57062-cms-gcm-short-tag

gpgsm CVE-2026-57062: CMS AES-GCM 短タグ USN-8720-1 GnuPG の gpgsm（S/MIME および CMS ツール）は、CMS AuthEnvelopedData RFC 5083 AES-256-GCM メッセージ内の mac OCTET STRING から検証する認証タグの 長さを導出し、libgcrypt は 4 バイトという短いタグも受け入れます。RFC 5084 では 少なくとも 12 バイトが要求されています。Ubuntu は noble gnupg2 2.4.4-2ubuntu17.6 で、12 オクテット未満の authta...

AlmaLinux 9.2 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1770668132)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1770668132 advisory. - Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service...

AlmaLinux 9.2 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1782152259)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1782152259 advisory. - Issue Summary: Cryptographic Message Services CMS processing fails to perform sufficient input validation on the cipher and tag...

Rocky Linux 9.6 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1770667352)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1770667352 advisory. - Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a sta...

CVE-2025-15467

CVE-2025-15467 OpenSSL CMS AuthEnvelopedData 파싱의 스택 버퍼 오버플로 취약점 CMS AuthEnvelopedData 콘텐츠에서 AEAD 암호 매개변수예: AES-GCM를 파싱할 때 evpciphergetasn1aeadparams에서 스택 버퍼 오버플로가 발생합니다. 비정상적으로 큰 IV가 16바이트 스택 버퍼를 오버플로시켜 서비스 거부 및 잠재적 원격 코드 실행을 유발할 수 있습니다. 영향을 받는 버전 Branch| Vulnerable| Fixed ---|---|--- 3.6.x| 3.6....

openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

A flaw was found in OpenSSL's Cryptographic Message Services CMS AuthEnvelopedData processing. An on-path attacker can exploit insufficient input validation on cipher and tag length fields by sending specially crafted CMS messages. This can lead to the forging of messages or bypassing integrity...

openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

A flaw was found in OpenSSL's Cryptographic Message Services CMS AuthEnvelopedData processing. An on-path attacker can exploit insufficient input validation on cipher and tag length fields by sending specially crafted CMS messages. This can lead to the forging of messages or bypassing integrity...

openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

A flaw was found in OpenSSL's Cryptographic Message Services CMS AuthEnvelopedData processing. An on-path attacker can exploit insufficient input validation on cipher and tag length fields by sending specially crafted CMS messages. This can lead to the forging of messages or bypassing integrity...

BASM (Broken Authentication & Session Management) Bouncy Castle Dependency in Jira Software Data Center

This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-12802 was introduced in 10.0.0 and later of Jira Software Data Center and Server. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

BASM (Broken Authentication & Session Management) Bouncy Castle Dependency in Jira Service Management Data Center and Server

This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-12802 was introduced in 10.0.0 and later of Jira Service Management Data Center and Server. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.7 and a CVSS...

openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

A flaw was found in OpenSSL's Cryptographic Message Services CMS AuthEnvelopedData processing. An on-path attacker can exploit insufficient input validation on cipher and tag length fields by sending specially crafted CMS messages. This can lead to the forging of messages or bypassing integrity...

openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

A flaw was found in OpenSSL's Cryptographic Message Services CMS AuthEnvelopedData processing. An on-path attacker can exploit insufficient input validation on cipher and tag length fields by sending specially crafted CMS messages. This can lead to the forging of messages or bypassing integrity...

BASM (Broken Authentication & Session Management) Bouncy Castle Dependency in Crucible Server

This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-12802 was introduced in 4.9.0 and later of Crucible. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

CVE-2026-12802

A flaw was found in Bouncy Castle for Java. This vulnerability allows a remote attacker to compromise the integrity of data during the decryption of Cryptographic Message Syntax CMS AuthEnvelopedData. The software fails to properly enforce the tag-length, which could enable an attacker to...

openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

A flaw was found in OpenSSL's Cryptographic Message Services CMS AuthEnvelopedData processing. An on-path attacker can exploit insufficient input validation on cipher and tag length fields by sending specially crafted CMS messages. This can lead to the forging of messages or bypassing integrity...

openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

A flaw was found in OpenSSL's Cryptographic Message Services CMS AuthEnvelopedData processing. An on-path attacker can exploit insufficient input validation on cipher and tag length fields by sending specially crafted CMS messages. This can lead to the forging of messages or bypassing integrity...

openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

A flaw was found in OpenSSL's Cryptographic Message Services CMS AuthEnvelopedData processing. An on-path attacker can exploit insufficient input validation on cipher and tag length fields by sending specially crafted CMS messages. This can lead to the forging of messages or bypassing integrity...

Broken Authentication & Session Management org.bouncycastle:bcpkix-lts8on Dependency in Confluence Data Center

This High severity Broken Authentication & Session Management vulnerability was introduced in versions 9.2.8, 9.5.4, 10.0.3, 10.1.0, and 10.2.0 of Confluence Data Center. This Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

Cryptographic Failure org.bouncycastle:bcpkix-jdk18on Dependency in Bamboo Data Center

This High severity Cryptographic Failure vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0 and 12.1.0 of Bamboo Data Center. This Cryptographic Failure vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...