csaf_suse - suse-su-2025:03443-1

suse-su-2025:03443-1

Vulnerability from csaf_suse

Published

2025-09-30 14:54

Modified

2025-09-30 14:54

Summary

Security update for openssl-1_1

Notes

Title of the patch

Security update for openssl-1_1

Description of the patch

This update for openssl-1_1 fixes the following issues: - CVE-2025-9230: incorrect check of key size can lead to out-of-bounds read and write in RFC 3211 KEK unwrap (bsc#1250232).

Patchnames

SUSE-2025-3443,SUSE-SLE-Module-Basesystem-15-SP6-2025-3443,SUSE-SLE-Module-Development-Tools-15-SP6-2025-3443,SUSE-SLE-Module-Legacy-15-SP6-2025-3443,openSUSE-SLE-15.6-2025-3443

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for openssl-1_1",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for openssl-1_1 fixes the following issues:\n\n- CVE-2025-9230: incorrect check of key size can lead to out-of-bounds read and write in RFC 3211 KEK unwrap\n  (bsc#1250232).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2025-3443,SUSE-SLE-Module-Basesystem-15-SP6-2025-3443,SUSE-SLE-Module-Development-Tools-15-SP6-2025-3443,SUSE-SLE-Module-Legacy-15-SP6-2025-3443,openSUSE-SLE-15.6-2025-3443",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_03443-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2025:03443-1",
        "url": "https://www.suse.com/support/update/announcement/2025/suse-su-202503443-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2025:03443-1",
        "url": "https://lists.suse.com/pipermail/sle-updates/2025-September/041973.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1250232",
        "url": "https://bugzilla.suse.com/1250232"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-9230 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-9230/"
      }
    ],
    "title": "Security update for openssl-1_1",
    "tracking": {
      "current_release_date": "2025-09-30T14:54:55Z",
      "generator": {
        "date": "2025-09-30T14:54:55Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2025:03443-1",
      "initial_release_date": "2025-09-30T14:54:55Z",
      "revision_history": [
        {
          "date": "2025-09-30T14:54:55Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-1_1-devel-1.1.1w-150600.5.18.1.aarch64",
                "product": {
                  "name": "libopenssl-1_1-devel-1.1.1w-150600.5.18.1.aarch64",
                  "product_id": "libopenssl-1_1-devel-1.1.1w-150600.5.18.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_1-1.1.1w-150600.5.18.1.aarch64",
                "product": {
                  "name": "libopenssl1_1-1.1.1w-150600.5.18.1.aarch64",
                  "product_id": "libopenssl1_1-1.1.1w-150600.5.18.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1_1-1.1.1w-150600.5.18.1.aarch64",
                "product": {
                  "name": "openssl-1_1-1.1.1w-150600.5.18.1.aarch64",
                  "product_id": "openssl-1_1-1.1.1w-150600.5.18.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-1_1-devel-64bit-1.1.1w-150600.5.18.1.aarch64_ilp32",
                "product": {
                  "name": "libopenssl-1_1-devel-64bit-1.1.1w-150600.5.18.1.aarch64_ilp32",
                  "product_id": "libopenssl-1_1-devel-64bit-1.1.1w-150600.5.18.1.aarch64_ilp32"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_1-64bit-1.1.1w-150600.5.18.1.aarch64_ilp32",
                "product": {
                  "name": "libopenssl1_1-64bit-1.1.1w-150600.5.18.1.aarch64_ilp32",
                  "product_id": "libopenssl1_1-64bit-1.1.1w-150600.5.18.1.aarch64_ilp32"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64_ilp32"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-1_1-devel-1.1.1w-150600.5.18.1.i586",
                "product": {
                  "name": "libopenssl-1_1-devel-1.1.1w-150600.5.18.1.i586",
                  "product_id": "libopenssl-1_1-devel-1.1.1w-150600.5.18.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_1-1.1.1w-150600.5.18.1.i586",
                "product": {
                  "name": "libopenssl1_1-1.1.1w-150600.5.18.1.i586",
                  "product_id": "libopenssl1_1-1.1.1w-150600.5.18.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1_1-1.1.1w-150600.5.18.1.i586",
                "product": {
                  "name": "openssl-1_1-1.1.1w-150600.5.18.1.i586",
                  "product_id": "openssl-1_1-1.1.1w-150600.5.18.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssl-1_1-doc-1.1.1w-150600.5.18.1.noarch",
                "product": {
                  "name": "openssl-1_1-doc-1.1.1w-150600.5.18.1.noarch",
                  "product_id": "openssl-1_1-doc-1.1.1w-150600.5.18.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-1_1-devel-1.1.1w-150600.5.18.1.ppc64le",
                "product": {
                  "name": "libopenssl-1_1-devel-1.1.1w-150600.5.18.1.ppc64le",
                  "product_id": "libopenssl-1_1-devel-1.1.1w-150600.5.18.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_1-1.1.1w-150600.5.18.1.ppc64le",
                "product": {
                  "name": "libopenssl1_1-1.1.1w-150600.5.18.1.ppc64le",
                  "product_id": "libopenssl1_1-1.1.1w-150600.5.18.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1_1-1.1.1w-150600.5.18.1.ppc64le",
                "product": {
                  "name": "openssl-1_1-1.1.1w-150600.5.18.1.ppc64le",
                  "product_id": "openssl-1_1-1.1.1w-150600.5.18.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-1_1-devel-1.1.1w-150600.5.18.1.s390x",
                "product": {
                  "name": "libopenssl-1_1-devel-1.1.1w-150600.5.18.1.s390x",
                  "product_id": "libopenssl-1_1-devel-1.1.1w-150600.5.18.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_1-1.1.1w-150600.5.18.1.s390x",
                "product": {
                  "name": "libopenssl1_1-1.1.1w-150600.5.18.1.s390x",
                  "product_id": "libopenssl1_1-1.1.1w-150600.5.18.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1_1-1.1.1w-150600.5.18.1.s390x",
                "product": {
                  "name": "openssl-1_1-1.1.1w-150600.5.18.1.s390x",
                  "product_id": "openssl-1_1-1.1.1w-150600.5.18.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-1_1-devel-1.1.1w-150600.5.18.1.x86_64",
                "product": {
                  "name": "libopenssl-1_1-devel-1.1.1w-150600.5.18.1.x86_64",
                  "product_id": "libopenssl-1_1-devel-1.1.1w-150600.5.18.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl-1_1-devel-32bit-1.1.1w-150600.5.18.1.x86_64",
                "product": {
                  "name": "libopenssl-1_1-devel-32bit-1.1.1w-150600.5.18.1.x86_64",
                  "product_id": "libopenssl-1_1-devel-32bit-1.1.1w-150600.5.18.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_1-1.1.1w-150600.5.18.1.x86_64",
                "product": {
                  "name": "libopenssl1_1-1.1.1w-150600.5.18.1.x86_64",
                  "product_id": "libopenssl1_1-1.1.1w-150600.5.18.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_1-32bit-1.1.1w-150600.5.18.1.x86_64",
                "product": {
                  "name": "libopenssl1_1-32bit-1.1.1w-150600.5.18.1.x86_64",
                  "product_id": "libopenssl1_1-32bit-1.1.1w-150600.5.18.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1_1-1.1.1w-150600.5.18.1.x86_64",
                "product": {
                  "name": "openssl-1_1-1.1.1w-150600.5.18.1.x86_64",
                  "product_id": "openssl-1_1-1.1.1w-150600.5.18.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Basesystem 15 SP6",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Basesystem 15 SP6",
                  "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-basesystem:15:sp6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Development Tools 15 SP6",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Development Tools 15 SP6",
                  "product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-development-tools:15:sp6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Legacy 15 SP6",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Legacy 15 SP6",
                  "product_id": "SUSE Linux Enterprise Module for Legacy 15 SP6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-legacy:15:sp6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.6",
                "product": {
                  "name": "openSUSE Leap 15.6",
                  "product_id": "openSUSE Leap 15.6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_1-1.1.1w-150600.5.18.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:libopenssl1_1-1.1.1w-150600.5.18.1.aarch64"
        },
        "product_reference": "libopenssl1_1-1.1.1w-150600.5.18.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_1-1.1.1w-150600.5.18.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:libopenssl1_1-1.1.1w-150600.5.18.1.ppc64le"
        },
        "product_reference": "libopenssl1_1-1.1.1w-150600.5.18.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_1-1.1.1w-150600.5.18.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:libopenssl1_1-1.1.1w-150600.5.18.1.s390x"
        },
        "product_reference": "libopenssl1_1-1.1.1w-150600.5.18.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_1-1.1.1w-150600.5.18.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:libopenssl1_1-1.1.1w-150600.5.18.1.x86_64"
        },
        "product_reference": "libopenssl1_1-1.1.1w-150600.5.18.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_1-32bit-1.1.1w-150600.5.18.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.18.1.x86_64"
        },
        "product_reference": "libopenssl1_1-32bit-1.1.1w-150600.5.18.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-1_1-devel-1.1.1w-150600.5.18.1.aarch64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.18.1.aarch64"
        },
        "product_reference": "libopenssl-1_1-devel-1.1.1w-150600.5.18.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-1_1-devel-1.1.1w-150600.5.18.1.ppc64le as component of SUSE Linux Enterprise Module for Development Tools 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.18.1.ppc64le"
        },
        "product_reference": "libopenssl-1_1-devel-1.1.1w-150600.5.18.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-1_1-devel-1.1.1w-150600.5.18.1.s390x as component of SUSE Linux Enterprise Module for Development Tools 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.18.1.s390x"
        },
        "product_reference": "libopenssl-1_1-devel-1.1.1w-150600.5.18.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-1_1-devel-1.1.1w-150600.5.18.1.x86_64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.18.1.x86_64"
        },
        "product_reference": "libopenssl-1_1-devel-1.1.1w-150600.5.18.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1_1-1.1.1w-150600.5.18.1.aarch64 as component of SUSE Linux Enterprise Module for Legacy 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Legacy 15 SP6:openssl-1_1-1.1.1w-150600.5.18.1.aarch64"
        },
        "product_reference": "openssl-1_1-1.1.1w-150600.5.18.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1_1-1.1.1w-150600.5.18.1.ppc64le as component of SUSE Linux Enterprise Module for Legacy 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Legacy 15 SP6:openssl-1_1-1.1.1w-150600.5.18.1.ppc64le"
        },
        "product_reference": "openssl-1_1-1.1.1w-150600.5.18.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1_1-1.1.1w-150600.5.18.1.s390x as component of SUSE Linux Enterprise Module for Legacy 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Legacy 15 SP6:openssl-1_1-1.1.1w-150600.5.18.1.s390x"
        },
        "product_reference": "openssl-1_1-1.1.1w-150600.5.18.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1_1-1.1.1w-150600.5.18.1.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15 SP6",
          "product_id": "SUSE Linux Enterprise Module for Legacy 15 SP6:openssl-1_1-1.1.1w-150600.5.18.1.x86_64"
        },
        "product_reference": "openssl-1_1-1.1.1w-150600.5.18.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-1_1-devel-1.1.1w-150600.5.18.1.aarch64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:libopenssl-1_1-devel-1.1.1w-150600.5.18.1.aarch64"
        },
        "product_reference": "libopenssl-1_1-devel-1.1.1w-150600.5.18.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-1_1-devel-1.1.1w-150600.5.18.1.ppc64le as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:libopenssl-1_1-devel-1.1.1w-150600.5.18.1.ppc64le"
        },
        "product_reference": "libopenssl-1_1-devel-1.1.1w-150600.5.18.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-1_1-devel-1.1.1w-150600.5.18.1.s390x as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:libopenssl-1_1-devel-1.1.1w-150600.5.18.1.s390x"
        },
        "product_reference": "libopenssl-1_1-devel-1.1.1w-150600.5.18.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-1_1-devel-1.1.1w-150600.5.18.1.x86_64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:libopenssl-1_1-devel-1.1.1w-150600.5.18.1.x86_64"
        },
        "product_reference": "libopenssl-1_1-devel-1.1.1w-150600.5.18.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-1_1-devel-32bit-1.1.1w-150600.5.18.1.x86_64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:libopenssl-1_1-devel-32bit-1.1.1w-150600.5.18.1.x86_64"
        },
        "product_reference": "libopenssl-1_1-devel-32bit-1.1.1w-150600.5.18.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_1-1.1.1w-150600.5.18.1.aarch64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:libopenssl1_1-1.1.1w-150600.5.18.1.aarch64"
        },
        "product_reference": "libopenssl1_1-1.1.1w-150600.5.18.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_1-1.1.1w-150600.5.18.1.ppc64le as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:libopenssl1_1-1.1.1w-150600.5.18.1.ppc64le"
        },
        "product_reference": "libopenssl1_1-1.1.1w-150600.5.18.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_1-1.1.1w-150600.5.18.1.s390x as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:libopenssl1_1-1.1.1w-150600.5.18.1.s390x"
        },
        "product_reference": "libopenssl1_1-1.1.1w-150600.5.18.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_1-1.1.1w-150600.5.18.1.x86_64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:libopenssl1_1-1.1.1w-150600.5.18.1.x86_64"
        },
        "product_reference": "libopenssl1_1-1.1.1w-150600.5.18.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_1-32bit-1.1.1w-150600.5.18.1.x86_64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:libopenssl1_1-32bit-1.1.1w-150600.5.18.1.x86_64"
        },
        "product_reference": "libopenssl1_1-32bit-1.1.1w-150600.5.18.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1_1-1.1.1w-150600.5.18.1.aarch64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:openssl-1_1-1.1.1w-150600.5.18.1.aarch64"
        },
        "product_reference": "openssl-1_1-1.1.1w-150600.5.18.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1_1-1.1.1w-150600.5.18.1.ppc64le as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:openssl-1_1-1.1.1w-150600.5.18.1.ppc64le"
        },
        "product_reference": "openssl-1_1-1.1.1w-150600.5.18.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1_1-1.1.1w-150600.5.18.1.s390x as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:openssl-1_1-1.1.1w-150600.5.18.1.s390x"
        },
        "product_reference": "openssl-1_1-1.1.1w-150600.5.18.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1_1-1.1.1w-150600.5.18.1.x86_64 as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:openssl-1_1-1.1.1w-150600.5.18.1.x86_64"
        },
        "product_reference": "openssl-1_1-1.1.1w-150600.5.18.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1_1-doc-1.1.1w-150600.5.18.1.noarch as component of openSUSE Leap 15.6",
          "product_id": "openSUSE Leap 15.6:openssl-1_1-doc-1.1.1w-150600.5.18.1.noarch"
        },
        "product_reference": "openssl-1_1-doc-1.1.1w-150600.5.18.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.6"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-9230",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-9230"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Basesystem 15 SP6:libopenssl1_1-1.1.1w-150600.5.18.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP6:libopenssl1_1-1.1.1w-150600.5.18.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP6:libopenssl1_1-1.1.1w-150600.5.18.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP6:libopenssl1_1-1.1.1w-150600.5.18.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.18.1.x86_64",
          "SUSE Linux Enterprise Module for Development Tools 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.18.1.aarch64",
          "SUSE Linux Enterprise Module for Development Tools 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.18.1.ppc64le",
          "SUSE Linux Enterprise Module for Development Tools 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.18.1.s390x",
          "SUSE Linux Enterprise Module for Development Tools 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.18.1.x86_64",
          "SUSE Linux Enterprise Module for Legacy 15 SP6:openssl-1_1-1.1.1w-150600.5.18.1.aarch64",
          "SUSE Linux Enterprise Module for Legacy 15 SP6:openssl-1_1-1.1.1w-150600.5.18.1.ppc64le",
          "SUSE Linux Enterprise Module for Legacy 15 SP6:openssl-1_1-1.1.1w-150600.5.18.1.s390x",
          "SUSE Linux Enterprise Module for Legacy 15 SP6:openssl-1_1-1.1.1w-150600.5.18.1.x86_64",
          "openSUSE Leap 15.6:libopenssl-1_1-devel-1.1.1w-150600.5.18.1.aarch64",
          "openSUSE Leap 15.6:libopenssl-1_1-devel-1.1.1w-150600.5.18.1.ppc64le",
          "openSUSE Leap 15.6:libopenssl-1_1-devel-1.1.1w-150600.5.18.1.s390x",
          "openSUSE Leap 15.6:libopenssl-1_1-devel-1.1.1w-150600.5.18.1.x86_64",
          "openSUSE Leap 15.6:libopenssl-1_1-devel-32bit-1.1.1w-150600.5.18.1.x86_64",
          "openSUSE Leap 15.6:libopenssl1_1-1.1.1w-150600.5.18.1.aarch64",
          "openSUSE Leap 15.6:libopenssl1_1-1.1.1w-150600.5.18.1.ppc64le",
          "openSUSE Leap 15.6:libopenssl1_1-1.1.1w-150600.5.18.1.s390x",
          "openSUSE Leap 15.6:libopenssl1_1-1.1.1w-150600.5.18.1.x86_64",
          "openSUSE Leap 15.6:libopenssl1_1-32bit-1.1.1w-150600.5.18.1.x86_64",
          "openSUSE Leap 15.6:openssl-1_1-1.1.1w-150600.5.18.1.aarch64",
          "openSUSE Leap 15.6:openssl-1_1-1.1.1w-150600.5.18.1.ppc64le",
          "openSUSE Leap 15.6:openssl-1_1-1.1.1w-150600.5.18.1.s390x",
          "openSUSE Leap 15.6:openssl-1_1-1.1.1w-150600.5.18.1.x86_64",
          "openSUSE Leap 15.6:openssl-1_1-doc-1.1.1w-150600.5.18.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-9230",
          "url": "https://www.suse.com/security/cve/CVE-2025-9230"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1250232 for CVE-2025-9230",
          "url": "https://bugzilla.suse.com/1250232"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1250410 for CVE-2025-9230",
          "url": "https://bugzilla.suse.com/1250410"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Basesystem 15 SP6:libopenssl1_1-1.1.1w-150600.5.18.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP6:libopenssl1_1-1.1.1w-150600.5.18.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP6:libopenssl1_1-1.1.1w-150600.5.18.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP6:libopenssl1_1-1.1.1w-150600.5.18.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.18.1.x86_64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.18.1.aarch64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.18.1.ppc64le",
            "SUSE Linux Enterprise Module for Development Tools 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.18.1.s390x",
            "SUSE Linux Enterprise Module for Development Tools 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.18.1.x86_64",
            "SUSE Linux Enterprise Module for Legacy 15 SP6:openssl-1_1-1.1.1w-150600.5.18.1.aarch64",
            "SUSE Linux Enterprise Module for Legacy 15 SP6:openssl-1_1-1.1.1w-150600.5.18.1.ppc64le",
            "SUSE Linux Enterprise Module for Legacy 15 SP6:openssl-1_1-1.1.1w-150600.5.18.1.s390x",
            "SUSE Linux Enterprise Module for Legacy 15 SP6:openssl-1_1-1.1.1w-150600.5.18.1.x86_64",
            "openSUSE Leap 15.6:libopenssl-1_1-devel-1.1.1w-150600.5.18.1.aarch64",
            "openSUSE Leap 15.6:libopenssl-1_1-devel-1.1.1w-150600.5.18.1.ppc64le",
            "openSUSE Leap 15.6:libopenssl-1_1-devel-1.1.1w-150600.5.18.1.s390x",
            "openSUSE Leap 15.6:libopenssl-1_1-devel-1.1.1w-150600.5.18.1.x86_64",
            "openSUSE Leap 15.6:libopenssl-1_1-devel-32bit-1.1.1w-150600.5.18.1.x86_64",
            "openSUSE Leap 15.6:libopenssl1_1-1.1.1w-150600.5.18.1.aarch64",
            "openSUSE Leap 15.6:libopenssl1_1-1.1.1w-150600.5.18.1.ppc64le",
            "openSUSE Leap 15.6:libopenssl1_1-1.1.1w-150600.5.18.1.s390x",
            "openSUSE Leap 15.6:libopenssl1_1-1.1.1w-150600.5.18.1.x86_64",
            "openSUSE Leap 15.6:libopenssl1_1-32bit-1.1.1w-150600.5.18.1.x86_64",
            "openSUSE Leap 15.6:openssl-1_1-1.1.1w-150600.5.18.1.aarch64",
            "openSUSE Leap 15.6:openssl-1_1-1.1.1w-150600.5.18.1.ppc64le",
            "openSUSE Leap 15.6:openssl-1_1-1.1.1w-150600.5.18.1.s390x",
            "openSUSE Leap 15.6:openssl-1_1-1.1.1w-150600.5.18.1.x86_64",
            "openSUSE Leap 15.6:openssl-1_1-doc-1.1.1w-150600.5.18.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Basesystem 15 SP6:libopenssl1_1-1.1.1w-150600.5.18.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP6:libopenssl1_1-1.1.1w-150600.5.18.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP6:libopenssl1_1-1.1.1w-150600.5.18.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP6:libopenssl1_1-1.1.1w-150600.5.18.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.18.1.x86_64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.18.1.aarch64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.18.1.ppc64le",
            "SUSE Linux Enterprise Module for Development Tools 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.18.1.s390x",
            "SUSE Linux Enterprise Module for Development Tools 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.18.1.x86_64",
            "SUSE Linux Enterprise Module for Legacy 15 SP6:openssl-1_1-1.1.1w-150600.5.18.1.aarch64",
            "SUSE Linux Enterprise Module for Legacy 15 SP6:openssl-1_1-1.1.1w-150600.5.18.1.ppc64le",
            "SUSE Linux Enterprise Module for Legacy 15 SP6:openssl-1_1-1.1.1w-150600.5.18.1.s390x",
            "SUSE Linux Enterprise Module for Legacy 15 SP6:openssl-1_1-1.1.1w-150600.5.18.1.x86_64",
            "openSUSE Leap 15.6:libopenssl-1_1-devel-1.1.1w-150600.5.18.1.aarch64",
            "openSUSE Leap 15.6:libopenssl-1_1-devel-1.1.1w-150600.5.18.1.ppc64le",
            "openSUSE Leap 15.6:libopenssl-1_1-devel-1.1.1w-150600.5.18.1.s390x",
            "openSUSE Leap 15.6:libopenssl-1_1-devel-1.1.1w-150600.5.18.1.x86_64",
            "openSUSE Leap 15.6:libopenssl-1_1-devel-32bit-1.1.1w-150600.5.18.1.x86_64",
            "openSUSE Leap 15.6:libopenssl1_1-1.1.1w-150600.5.18.1.aarch64",
            "openSUSE Leap 15.6:libopenssl1_1-1.1.1w-150600.5.18.1.ppc64le",
            "openSUSE Leap 15.6:libopenssl1_1-1.1.1w-150600.5.18.1.s390x",
            "openSUSE Leap 15.6:libopenssl1_1-1.1.1w-150600.5.18.1.x86_64",
            "openSUSE Leap 15.6:libopenssl1_1-32bit-1.1.1w-150600.5.18.1.x86_64",
            "openSUSE Leap 15.6:openssl-1_1-1.1.1w-150600.5.18.1.aarch64",
            "openSUSE Leap 15.6:openssl-1_1-1.1.1w-150600.5.18.1.ppc64le",
            "openSUSE Leap 15.6:openssl-1_1-1.1.1w-150600.5.18.1.s390x",
            "openSUSE Leap 15.6:openssl-1_1-1.1.1w-150600.5.18.1.x86_64",
            "openSUSE Leap 15.6:openssl-1_1-doc-1.1.1w-150600.5.18.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-09-30T14:54:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-9230"
    }
  ]
}

CVE-2025-9230 (GCVE-0-2025-9230)

Vulnerability from cvelistv5

Published

2025-09-30 13:17

Modified

2025-09-30 19:30

Severity ?

CWE

CWE-125 - Out-of-bounds Read
CWE-787 - Out-of-bounds Write

Summary

Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service or Execution of attacker-supplied code. Although the consequences of a successful exploit of this vulnerability could be severe, the probability that the attacker would be able to perform it is low. Besides, password based (PWRI) encryption support in CMS messages is very rarely used. For that reason the issue was assessed as Moderate severity according to our Security Policy. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary.

References

▼	URL	Tags
	https://openssl-library.org/news/secadv/20250930.txt	vendor-advisory
	https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482	patch
	https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280	patch
	https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45	patch
	https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd	patch
	https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def	patch
	https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba	patch
	https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3	patch

Impacted products

	Vendor	Product	Version
	OpenSSL	OpenSSL	Version: 3.5.0 ≤ Version: 3.4.0 ≤ Version: 3.3.0 ≤ Version: 3.2.0 ≤ Version: 3.0.0 ≤ Version: 1.1.1 < 1.1.1zd Version: 1.0.2 < 1.0.2zm

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-9230",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-09-30T19:30:08.302408Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-09-30T19:30:29.803Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "OpenSSL",
          "vendor": "OpenSSL",
          "versions": [
            {
              "lessThan": "3.5.4",
              "status": "affected",
              "version": "3.5.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.4.3",
              "status": "affected",
              "version": "3.4.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.3.5",
              "status": "affected",
              "version": "3.3.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.2.6",
              "status": "affected",
              "version": "3.2.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.0.18",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.1.1zd",
              "status": "affected",
              "version": "1.1.1",
              "versionType": "custom"
            },
            {
              "lessThan": "1.0.2zm",
              "status": "affected",
              "version": "1.0.2",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Stanislav Fort (Aisle Research)"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Stanislav Fort (Aisle Research)"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Viktor Dukhovni"
        }
      ],
      "datePublic": "2025-09-30T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Issue summary: An application trying to decrypt CMS messages encrypted using\u003cbr\u003epassword based encryption can trigger an out-of-bounds read and write.\u003cbr\u003e\u003cbr\u003eImpact summary: This out-of-bounds read may trigger a crash which leads to\u003cbr\u003eDenial of Service for an application. The out-of-bounds write can cause\u003cbr\u003ea memory corruption which can have various consequences including\u003cbr\u003ea Denial of Service or Execution of attacker-supplied code.\u003cbr\u003e\u003cbr\u003eAlthough the consequences of a successful exploit of this vulnerability\u003cbr\u003ecould be severe, the probability that the attacker would be able to\u003cbr\u003eperform it is low. Besides, password based (PWRI) encryption support in CMS\u003cbr\u003emessages is very rarely used. For that reason the issue was assessed as\u003cbr\u003eModerate severity according to our Security Policy.\u003cbr\u003e\u003cbr\u003eThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\u003cbr\u003eissue, as the CMS implementation is outside the OpenSSL FIPS module\u003cbr\u003eboundary."
            }
          ],
          "value": "Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary."
        }
      ],
      "metrics": [
        {
          "format": "other",
          "other": {
            "content": {
              "text": "Moderate"
            },
            "type": "https://openssl-library.org/policies/general/security-policy/"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125 Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            },
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-09-30T13:17:00.808Z",
        "orgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5",
        "shortName": "openssl"
      },
      "references": [
        {
          "name": "OpenSSL Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://openssl-library.org/news/secadv/20250930.txt"
        },
        {
          "name": "3.5.4 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482"
        },
        {
          "name": "3.4.3 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280"
        },
        {
          "name": "3.3.5 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45"
        },
        {
          "name": "3.2.6 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd"
        },
        {
          "name": "3.0.18 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def"
        },
        {
          "name": "1.1.1zd git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba"
        },
        {
          "name": "1.0.2zm git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Out-of-bounds read \u0026 write in RFC 3211 KEK Unwrap",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5",
    "assignerShortName": "openssl",
    "cveId": "CVE-2025-9230",
    "datePublished": "2025-09-30T13:17:00.808Z",
    "dateReserved": "2025-08-20T08:38:07.678Z",
    "dateUpdated": "2025-09-30T19:30:29.803Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted