CVE catalog

CVE-2025-27587

openssl: CVE-2025-27587

Severity: Medium · CVSS 5.3CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Published: May 10, 2025, 2:53:54 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.45% · Oct 25, 2026

OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable to a Minerva attack, exploitable by measuring the time of signing of random messages using the EVP_DigestSign API, and then using the private key to extract the K value (nonce) from the signatures. Next, based on the bit size of the extracted nonce, one can compare the signing time of full-sized nonces to signatures that used smaller nonces, via statistical tests. There is a side-channel in the P-364 curve that allows private key extraction (also, there is a dependency between the bit size of K and the size of the side channel). NOTE: This CVE is disputed because the OpenSSL security policy explicitly notes that any side channels which require same physical system to be detected are outside of the threat model for the software. The timing signal is so small that it is infeasible to be detected without having the attacking process running on the same physical system.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	openssl	sid	`3.6.5-1`	fixed
Debian	openssl	forky	`3.6.5-1`	fixed
Debian	openssl	trixie	`3.5.7-1~deb13u2`	fixed
Debian	openssl	trixie-security	`3.5.7-1~deb13u3`	fixed
Debian	openssl	bookworm	`3.0.20-1~deb12u2`	vulnerable
Debian	openssl	bookworm-security	`3.0.22-1~deb12u2`	vulnerable
Opensuse	openssl-3	tumbleweed	`3.5.0-3.1`	fixed
Suse	openssl-3	linux micro 6.1	`3.1.4-slfo.1.1_5.1`	fixed
Suse	openssl-3	linux enterprise module for basesystem 15 sp7	`3.2.3-150700.5.10.1`	fixed
Suse	openssl-3	linux enterprise module for basesystem 15 sp6	`3.1.4-150600.5.27.1`	fixed
Opensuse	openssl-3	leap 15.6	`3.1.4-150600.5.27.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	openssl	source	sid	`3.5.0-1`	unimportant	Not reported	Not reported
Debian	openssl	source	forky	`3.5.0-1`	unimportant	Not reported	Not reported
Debian	openssl	source	trixie	`3.5.0-1`	unimportant	Not reported	Not reported
Debian	openssl	source	bookworm	`(unfixed)`	unimportant	Not reported	Not reported
Opensuse	openssl-3	rpm	tumbleweed	`3.5.0-3.1`	Not reported	OPENSUSE-SU-2025:15183-1	Not reported
Suse	openssl-3	rpm	linux micro 6.1	`3.1.4-slfo.1.1_5.1`	Not reported	SUSE-SU-2025:20417-1	Not reported
Suse	openssl-3	rpm	linux enterprise module for basesystem 15 sp7	`3.2.3-150700.5.10.1`	Not reported	SUSE-SU-2025:02236-1	Not reported
Suse	openssl-3	rpm	linux enterprise module for basesystem 15 sp6	`3.1.4-150600.5.27.1`	Not reported	SUSE-SU-2025:1550-1	Not reported
Opensuse	openssl-3	rpm	leap 15.6	`3.1.4-150600.5.27.1`	Not reported	SUSE-SU-2025:1550-1	Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[libssl3]Affected
Source package: [openssl]
Details (6)
- 3.0.20-1~deb12u2 · amd64 · bookworm
  Affected
  dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
- 3.0.20-1~deb12u2 · arm64 · bookworm
  Affected
  dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
- 3.0.20-1~deb12u2 · amd64 · bookworm-security
  Affected
  dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
- 3.0.20-1~deb12u2 · arm64 · bookworm-security
  Affected
  dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
- 3.0.17-1~deb12u2 · amd64 · bookworm-updates
  Affected
  dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
- 3.0.17-1~deb12u2 · arm64 · bookworm-updates
  Affected
  dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
[libssl-dev]Affected
Source package: [openssl]
Details (6)
- 3.0.20-1~deb12u2 · amd64 · bookworm
  Affected
  dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
- 3.0.20-1~deb12u2 · arm64 · bookworm
  Affected
  dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
- 3.0.20-1~deb12u2 · amd64 · bookworm-security
  Affected
  dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
- 3.0.20-1~deb12u2 · arm64 · bookworm-security
  Affected
  dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
- 3.0.17-1~deb12u2 · amd64 · bookworm-updates
  Affected
  dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
- 3.0.17-1~deb12u2 · arm64 · bookworm-updates
  Affected
  dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
[libssl-doc]Affected
Source package: [openssl]
Details (6)
- 3.0.20-1~deb12u2 · all · bookworm
  Affected
  dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
- 3.0.20-1~deb12u2 · all · bookworm
  Affected
  dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
- 3.0.20-1~deb12u2 · all · bookworm-security
  Affected
  dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
- 3.0.20-1~deb12u2 · all · bookworm-security
  Affected
  dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
- 3.0.17-1~deb12u2 · all · bookworm-updates
  Affected
  dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
- 3.0.17-1~deb12u2 · all · bookworm-updates
  Affected
  dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
[openssl]Affected
Details (6)
- 3.0.20-1~deb12u2 · amd64 · bookworm
  Affected
  dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
- 3.0.20-1~deb12u2 · arm64 · bookworm
  Affected
  dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
- 3.0.20-1~deb12u2 · amd64 · bookworm-security
  Affected
  dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
- 3.0.20-1~deb12u2 · arm64 · bookworm-security
  Affected
  dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
- 3.0.17-1~deb12u2 · amd64 · bookworm-updates
  Affected
  dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
- 3.0.17-1~deb12u2 · arm64 · bookworm-updates
  Affected
  dsa · openssl · debian · bookworm; dsa · openssl · debian · 12

[openSUSE Tumbleweed]

[libopenssl3]Unknown
Source package: [openssl-3]
Details (1)
- 3.5.3-8.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.5.0-3.1
  Version impact unknown
  dsa · openssl-3 · opensuse · tumbleweed
[libopenssl3-32bit]Unknown
Source package: [openssl-3]
Details (1)
- 3.5.3-8.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.5.0-3.1
  Version impact unknown
  dsa · openssl-3 · opensuse · tumbleweed
[libopenssl-3-devel]Unknown
Source package: [openssl-3]
Details (1)
- 3.5.3-8.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.5.0-3.1
  Version impact unknown
  dsa · openssl-3 · opensuse · tumbleweed
[libopenssl-3-devel-32bit]Unknown
Source package: [openssl-3]
Details (1)
- 3.5.3-8.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.5.0-3.1
  Version impact unknown
  dsa · openssl-3 · opensuse · tumbleweed
[libopenssl-3-fips-provider]Unknown
Source package: [openssl-3]
Details (1)
- 3.5.3-8.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.5.0-3.1
  Version impact unknown
  dsa · openssl-3 · opensuse · tumbleweed
[libopenssl-3-fips-provider-32bit]Unknown
Source package: [openssl-3]
Details (1)
- 3.5.3-8.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.5.0-3.1
  Version impact unknown
  dsa · openssl-3 · opensuse · tumbleweed
[libopenssl-3-fips-provider-x86-64-v3]Unknown
Source package: [openssl-3]
Details (1)
- 3.5.3-8.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.5.0-3.1
  Version impact unknown
  dsa · openssl-3 · opensuse · tumbleweed
[libopenssl3-x86-64-v3]Unknown
Source package: [openssl-3]
Details (1)
- 3.5.3-8.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.5.0-3.1
  Version impact unknown
  dsa · openssl-3 · opensuse · tumbleweed
[openssl-3-doc]Unknown
Source package: [openssl-3]
Details (1)
- 3.5.3-8.1 · noarch · tumbleweed
  Unknown · Fixed: 3.5.0-3.1
  Version impact unknown
  dsa · openssl-3 · opensuse · tumbleweed
[openssl-3]Fixed
Source package: [openssl-3]
Details (1)
- 3.5.3-8.1 · x86_64 · tumbleweed
  Fixed · Fixed: 3.5.0-3.1
  dsa · openssl-3 · opensuse · tumbleweed

[Debian 13 (Trixie)]

[libssl3t64]Fixed
Source package: [openssl]
Details (6)
- 3.5.6-1~deb13u2 · amd64 · trixie
  Fixed · Fixed: 3.5.0-1
  dsa · openssl · debian · 13
- 3.5.6-1~deb13u2 · arm64 · trixie
  Fixed · Fixed: 3.5.0-1
  dsa · openssl · debian · 13
- 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 3.5.0-1
  dsa · openssl · debian · 13
- 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 3.5.0-1
  dsa · openssl · debian · 13
- 3.5.7-1~deb13u2 · arm64 · trixie-security
  Fixed · Fixed: 3.5.0-1
  dsa · openssl · debian · 13
- 3.5.7-1~deb13u3 · amd64 · trixie-security
  Fixed · Fixed: 3.5.0-1
  dsa · openssl · debian · 13
[libssl-dev]Fixed
Source package: [openssl]
Details (6)
- 3.5.6-1~deb13u2 · amd64 · trixie
  Fixed · Fixed: 3.5.0-1
  dsa · openssl · debian · 13
- 3.5.6-1~deb13u2 · arm64 · trixie
  Fixed · Fixed: 3.5.0-1
  dsa · openssl · debian · 13
- 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 3.5.0-1
  dsa · openssl · debian · 13
- 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 3.5.0-1
  dsa · openssl · debian · 13
- 3.5.7-1~deb13u2 · arm64 · trixie-security
  Fixed · Fixed: 3.5.0-1
  dsa · openssl · debian · 13
- 3.5.7-1~deb13u3 · amd64 · trixie-security
  Fixed · Fixed: 3.5.0-1
  dsa · openssl · debian · 13
[libssl-doc]Fixed
Source package: [openssl]
Details (6)
- 3.5.6-1~deb13u2 · all · trixie
  Fixed · Fixed: 3.5.0-1
  dsa · openssl · debian · 13
- 3.5.6-1~deb13u2 · all · trixie
  Fixed · Fixed: 3.5.0-1
  dsa · openssl · debian · 13
- 3.5.6-1~deb13u2 · all · trixie-security · Historical version
  Fixed · Fixed: 3.5.0-1
  dsa · openssl · debian · 13
- 3.5.7-1~deb13u2 · all · trixie-security · Historical version
  Fixed · Fixed: 3.5.0-1
  dsa · openssl · debian · 13
- 3.5.7-1~deb13u2 · all · trixie-security
  Fixed · Fixed: 3.5.0-1
  dsa · openssl · debian · 13
- 3.5.7-1~deb13u3 · all · trixie-security
  Fixed · Fixed: 3.5.0-1
  dsa · openssl · debian · 13
[openssl]Fixed
Details (6)
- 3.5.6-1~deb13u2 · amd64 · trixie
  Fixed · Fixed: 3.5.0-1
  dsa · openssl · debian · 13
- 3.5.6-1~deb13u2 · arm64 · trixie
  Fixed · Fixed: 3.5.0-1
  dsa · openssl · debian · 13
- 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 3.5.0-1
  dsa · openssl · debian · 13
- 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 3.5.0-1
  dsa · openssl · debian · 13
- 3.5.7-1~deb13u2 · arm64 · trixie-security
  Fixed · Fixed: 3.5.0-1
  dsa · openssl · debian · 13
- 3.5.7-1~deb13u3 · amd64 · trixie-security
  Fixed · Fixed: 3.5.0-1
  dsa · openssl · debian · 13
[openssl-provider-fips]Fixed
Source package: [openssl]
Details (6)
- 3.5.6-1~deb13u2 · amd64 · trixie
  Fixed · Fixed: 3.5.0-1
  dsa · openssl · debian · 13
- 3.5.6-1~deb13u2 · arm64 · trixie
  Fixed · Fixed: 3.5.0-1
  dsa · openssl · debian · 13
- 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 3.5.0-1
  dsa · openssl · debian · 13
- 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 3.5.0-1
  dsa · openssl · debian · 13
- 3.5.7-1~deb13u2 · arm64 · trixie-security
  Fixed · Fixed: 3.5.0-1
  dsa · openssl · debian · 13
- 3.5.7-1~deb13u3 · amd64 · trixie-security
  Fixed · Fixed: 3.5.0-1
  dsa · openssl · debian · 13
[openssl-provider-legacy]Fixed
Source package: [openssl]
Details (6)
- 3.5.6-1~deb13u2 · amd64 · trixie
  Fixed · Fixed: 3.5.0-1
  dsa · openssl · debian · 13
- 3.5.6-1~deb13u2 · arm64 · trixie
  Fixed · Fixed: 3.5.0-1
  dsa · openssl · debian · 13
- 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 3.5.0-1
  dsa · openssl · debian · 13
- 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 3.5.0-1
  dsa · openssl · debian · 13
- 3.5.7-1~deb13u2 · arm64 · trixie-security
  Fixed · Fixed: 3.5.0-1
  dsa · openssl · debian · 13
- 3.5.7-1~deb13u3 · amd64 · trixie-security
  Fixed · Fixed: 3.5.0-1
  dsa · openssl · debian · 13

Observed: Oct 27, 2026, 2:10:56 PM UTC

References

[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]