CVE-Katalog
CVE-2025-15467
OpenSSL vulnerabilities
- Schweregrad
- Critical · CVSS 9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 55.85% · Oct 22, 2026
Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote code execution. When parsing CMS (Auth)EnvelopedData structures that use AEAD ciphers such as AES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is copied into a fixed-size stack buffer without verifying that its length fits the destination. An attacker can supply a crafted CMS message with an oversized IV, causing a stack-based out-of-bounds write before any authentication or tag verification occurs. Applications and services that parse untrusted CMS or PKCS#7 content using AEAD ciphers (e.g., S/MIME (Auth)EnvelopedData with AES-GCM) are vulnerable. Because the overflow occurs prior to authentication, no valid key material is required to trigger it. While exploitability to remote code execution depends on platform and toolchain mitigations, the stack-based write primitive represents a severe risk. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue. OpenSSL 1.1.1 and 1.0.2 are not affected by this issue.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | openssl | sid | 3.6.5-1 | fixed |
| Debian | openssl | forky | 3.6.5-1 | fixed |
| Debian | openssl | trixie | 3.5.7-1~deb13u2 | fixed |
| Debian | openssl | trixie-security | 3.5.7-1~deb13u3 | fixed |
| Debian | openssl | bookworm | 3.0.20-1~deb12u2 | fixed |
| Debian | openssl | bookworm-security | 3.0.22-1~deb12u1 | fixed |
| Ubuntu | openssl | noble | 3.0.18-1~deb12u2 | fixed |
| Ubuntu | openssl | noble | 3.0.13-0ubuntu3.7 | fixed |
| Ubuntu | libssl-dev | noble | 3.0.13-0ubuntu3.7 | fixed |
| Ubuntu | libssl-doc | noble | 3.0.13-0ubuntu3.7 | fixed |
| Ubuntu | libssl3t64 | noble | 3.0.13-0ubuntu3.7 | fixed |
| Cpe | openssl | Not reported | 3.6.1 | fixed |
| Alpine | openssl | 3.17 | 3.0.19-r0 | fixed |
| Alpine | openssl | 3.20 | 3.3.6-r0 | fixed |
| Alpine | openssl | 3.21 | 3.3.6-r0 | fixed |
| Alpine | openssl | 3.22 | 3.5.5-r0 | fixed |
| Alpine | openssl | 3.23 | 3.5.5-r0 | fixed |
| Alpine | openssl | 3.24 | 3.5.5-r0 | fixed |
| Suse | openssl-3 | linux micro 6.0 | 3.1.4-11.1 | fixed |
| Suse | openssl-3 | linux micro 6.1 | 3.1.4-slfo.1.1_8.1 | fixed |
| Suse | openssl-3 | linux enterprise server 15 sp6-ltss | 3.1.4-150600.5.42.1 | fixed |
| Suse | openssl-3 | linux enterprise server for sap applications 15 sp6 | 3.1.4-150600.5.42.1 | fixed |
| Opensuse | openssl-3 | leap 15.6 | 3.1.4-150600.5.42.1 | fixed |
| Suse | openssl-3 | linux enterprise high performance computing 15 sp5-espos | 3.0.8-150500.5.57.1 | fixed |
| Suse | openssl-3 | linux enterprise high performance computing 15 sp5-ltss | 3.0.8-150500.5.57.1 | fixed |
| Suse | openssl-3 | linux enterprise server 15 sp5-ltss | 3.0.8-150500.5.57.1 | fixed |
| Suse | openssl-3 | linux enterprise server for sap applications 15 sp5 | 3.0.8-150500.5.57.1 | fixed |
| Suse | openssl-3 | linux enterprise micro 5.3 | 3.0.8-150400.4.78.1 | fixed |
| Suse | openssl-3 | linux enterprise micro 5.4 | 3.0.8-150400.4.78.1 | fixed |
| Suse | openssl-3 | linux enterprise high performance computing 15 sp4-espos | 3.0.8-150400.4.78.1 | fixed |
| Suse | openssl-3 | linux enterprise high performance computing 15 sp4-ltss | 3.0.8-150400.4.78.1 | fixed |
| Suse | openssl-3 | linux enterprise server 15 sp4-ltss | 3.0.8-150400.4.78.1 | fixed |
| Suse | openssl-3 | linux enterprise server for sap applications 15 sp4 | 3.0.8-150400.4.78.1 | fixed |
| Suse | openssl-3 | linux enterprise module for basesystem 15 sp7 | 3.2.3-150700.5.24.1 | fixed |
| Ubuntu | nodejs | pro | 6.11.4~dfsg-1ubuntu1 | vulnerable |
| Ubuntu | nodejs | pro | 6.11.4~dfsg-1ubuntu2 | vulnerable |
| Ubuntu | nodejs | pro | 6.12.0~dfsg-1ubuntu1 | vulnerable |
| Ubuntu | nodejs | pro | 6.12.0~dfsg-2ubuntu1 | vulnerable |
| Ubuntu | nodejs | pro | 6.12.0~dfsg-2ubuntu2 | vulnerable |
| Ubuntu | nodejs | pro | 8.10.0~dfsg-2 | vulnerable |
| Ubuntu | nodejs | pro | 8.10.0~dfsg-2ubuntu0.2 | vulnerable |
| Ubuntu | nodejs | pro | 8.10.0~dfsg-2ubuntu0.3 | vulnerable |
| Ubuntu | nodejs | pro | 8.10.0~dfsg-2ubuntu0.4 | vulnerable |
| Ubuntu | nodejs | pro | 8.10.0~dfsg-2ubuntu0.4+esm1 | vulnerable |
| Ubuntu | nodejs | pro | 8.10.0~dfsg-2ubuntu0.4+esm2 | vulnerable |
| Ubuntu | nodejs | pro | 8.10.0~dfsg-2ubuntu0.4+esm3 | vulnerable |
| Ubuntu | nodejs | pro | 8.10.0~dfsg-2ubuntu0.4+esm4 | vulnerable |
| Ubuntu | nodejs | pro | 8.10.0~dfsg-2ubuntu0.4+esm5 | vulnerable |
| Ubuntu | nodejs | pro | 8.10.0~dfsg-2ubuntu0.4+esm6 | vulnerable |
| Ubuntu | openssl | 22.04 | 1.1.1l-1ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.0-1ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.1-0ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.2 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.4 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.5 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.6 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.7 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.8 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.9 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.10 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.12 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.13 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.14 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.15 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.16 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.17 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.18 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.19 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.20 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.21 | fixed |
| Ubuntu | openssl | pro | 3.0.2-0ubuntu1.10+Fips1 | vulnerable |
| Ubuntu | openssl | pro | 3.0.2-0ubuntu1.12+Fips1 | vulnerable |
| Ubuntu | openssl | pro | 3.0.2-0ubuntu1.14+Fips1 | vulnerable |
| Ubuntu | openssl | pro | 3.0.2-0ubuntu1.15+Fips1 | vulnerable |
| Ubuntu | openssl | pro | 3.0.2-0ubuntu1.16+Fips1 | vulnerable |
| Ubuntu | openssl | pro | 3.0.2-0ubuntu1.17+Fips1 | vulnerable |
| Ubuntu | openssl | pro | 3.0.2-0ubuntu1.18+Fips1 | vulnerable |
| Ubuntu | openssl | pro | 3.0.2-0ubuntu1.19+Fips1 | vulnerable |
| Ubuntu | openssl | pro | 3.0.2-0ubuntu1.20+Fips1 | vulnerable |
| Ubuntu | openssl | pro | 3.0.2-0ubuntu1.21+Fips1 | fixed |
| Ubuntu | openssl-fips | pro | 3.0.13-0ubuntu3+Fips1 | vulnerable |
| Ubuntu | openssl-fips | pro | 3.0.13-0ubuntu3.6+Fips1 | vulnerable |
| Ubuntu | openssl-fips | pro | 3.0.13-0ubuntu3.12+Fips1 | fixed |
| Ubuntu | edk2 | 24.04 | 2023.05-2 | vulnerable |
| Ubuntu | edk2 | 24.04 | 2023.11-2 | vulnerable |
| Ubuntu | edk2 | 24.04 | 2023.11-3 | vulnerable |
| Ubuntu | edk2 | 24.04 | 2023.11-4 | vulnerable |
| Ubuntu | edk2 | 24.04 | 2023.11-5 | vulnerable |
| Ubuntu | edk2 | 24.04 | 2023.11-6 | vulnerable |
| Ubuntu | edk2 | 24.04 | 2023.11-8 | vulnerable |
| Ubuntu | edk2 | 24.04 | 2024.02-1 | vulnerable |
| Ubuntu | edk2 | 24.04 | 2024.02-2 | vulnerable |
| Ubuntu | edk2 | 24.04 | 2024.02-2ubuntu0.1 | vulnerable |
| Ubuntu | edk2 | 24.04 | 2024.02-2ubuntu0.3 | vulnerable |
| Ubuntu | edk2 | 24.04 | 2024.02-2ubuntu0.4 | vulnerable |
| Ubuntu | edk2 | 24.04 | 2024.02-2ubuntu0.5 | vulnerable |
| Ubuntu | edk2 | 24.04 | 2024.02-2ubuntu0.6 | vulnerable |
| Ubuntu | edk2 | 24.04 | 2024.02-2ubuntu0.7 | vulnerable |
| Ubuntu | edk2 | 24.04 | 2024.02-2ubuntu0.8 | vulnerable |
| Ubuntu | edk2 | 24.04 | 2024.02-2ubuntu0.9 | vulnerable |
| Ubuntu | edk2 | 24.04 | 2024.02-2ubuntu0.10 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.10-1ubuntu2 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.10-1ubuntu2.1 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.10-1ubuntu3 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.10-1ubuntu4 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu2 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.1 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.2 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.3 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.4 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.5 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.6 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.7 | fixed |
| Ubuntu | edk2 | 25.10 | 2025.02-3ubuntu2 | vulnerable |
| Ubuntu | edk2 | 25.10 | 2025.02-8 | vulnerable |
| Ubuntu | edk2 | 25.10 | 2025.02-8ubuntu1 | vulnerable |
| Ubuntu | edk2 | 25.10 | 2025.02-8ubuntu2 | vulnerable |
| Ubuntu | edk2 | 25.10 | 2025.02-8ubuntu3 | vulnerable |
| Ubuntu | edk2 | 25.10 | 2025.02-8ubuntu3.1 | vulnerable |
| Ubuntu | edk2 | 25.10 | 2025.02-8ubuntu3.2 | vulnerable |
| Ubuntu | openssl | 25.10 | 3.4.1-1ubuntu3 | vulnerable |
| Ubuntu | openssl | 25.10 | 3.5.0-2ubuntu1 | vulnerable |
| Ubuntu | openssl | 25.10 | 3.5.2-1ubuntu1 | vulnerable |
| Ubuntu | openssl | 25.10 | 3.5.3-1ubuntu2 | vulnerable |
| Ubuntu | openssl | 25.10 | 3.5.3-1ubuntu3 | fixed |
| Ubuntu | edk2 | 26.10 | 2025.11-3ubuntu7 | vulnerable |
| Ubuntu | edk2 | 26.10 | 2025.11-3ubuntu8 | vulnerable |
| Ubuntu | edk2 | 26.10 | 2026.05-2ubuntu1 | vulnerable |
| Ubuntu | edk2 | 26.10 | 2026.05-2ubuntu2 | vulnerable |
| Ubuntu | edk2 | 26.10 | 2026.05-2ubuntu3 | vulnerable |
| Ubuntu | edk2-hwe | 26.10 | 2025.11-3ubuntu8 | vulnerable |
| Ubuntu | edk2-hwe | 26.10 | 2025.11-3ubuntu9 | vulnerable |
| Ubuntu | edk2-hwe | 26.10 | 2026.05-2ubuntu1 | vulnerable |
| Ubuntu | edk2-hwe | 26.10 | 2026.05-2ubuntu2 | vulnerable |
| Ubuntu | edk2-hwe | 26.10 | 2026.05-2ubuntu3 | vulnerable |
| Ubuntu | edk2 | 26.04 | 2025.02-8ubuntu3 | vulnerable |
| Ubuntu | edk2 | 26.04 | 2025.11-3ubuntu6 | vulnerable |
| Ubuntu | edk2 | 26.04 | 2025.11-3ubuntu7 | vulnerable |
| Ubuntu | edk2 | 26.04 | 2025.11-3ubuntu7.2 | vulnerable |
| Ubuntu | edk2 | 26.04 | 2025.11-3ubuntu7.3 | vulnerable |
| Ubuntu | edk2-hwe | 26.04 | 2025.11-3ubuntu6 | vulnerable |
| Ubuntu | edk2-hwe | 26.04 | 2025.11-3ubuntu8 | vulnerable |
| Ubuntu | edk2-hwe | 26.04 | 2025.11-3ubuntu8.2 | vulnerable |
| Ubuntu | openssl | 26.04 | 3.5.3-1ubuntu2 | vulnerable |
| Ubuntu | openssl | 26.04 | 3.5.5-1ubuntu1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | openssl | source | sid | 3.5.5-1 | not yet assigned | Not reported | Not reported |
| Debian | openssl | source | forky | 3.5.5-1 | not yet assigned | Not reported | Not reported |
| Debian | openssl | source | trixie | 3.5.4-1~deb13u2 | not yet assigned | Not reported | Not reported |
| Debian | openssl | source | bookworm | 3.0.18-1~deb12u2 | not yet assigned | Not reported | Not reported |
| Ubuntu | openssl | deb | noble | 3.0.18-1~deb12u2 | Not reported | Not reported | Not reported |
| Ubuntu | openssl | deb | noble | 3.0.13-0ubuntu3.7 | Not reported | Not reported | Not reported |
| Ubuntu | libssl-dev | deb | noble | 3.0.13-0ubuntu3.7 | Not reported | Not reported | Not reported |
| Ubuntu | libssl-doc | deb | noble | 3.0.13-0ubuntu3.7 | Not reported | Not reported | Not reported |
| Ubuntu | libssl3t64 | deb | noble | 3.0.13-0ubuntu3.7 | Not reported | Not reported | Not reported |
| Cpe | openssl | cpe | Not reported | 3.6.1 | Not reported | NVD-CVE-2025-15467 | Not reported |
| Alpine | openssl | apk | 3.17 | 3.0.19-r0 | Not reported | ALPINE-CVE-2025-15467 | Not reported |
| Alpine | openssl | apk | 3.20 | 3.3.6-r0 | Not reported | ALPINE-CVE-2025-15467 | Not reported |
| Alpine | openssl | apk | 3.21 | 3.3.6-r0 | Not reported | ALPINE-CVE-2025-15467 | Not reported |
| Alpine | openssl | apk | 3.22 | 3.5.5-r0 | Not reported | ALPINE-CVE-2025-15467 | Not reported |
| Alpine | openssl | apk | 3.23 | 3.5.5-r0 | Not reported | ALPINE-CVE-2025-15467 | Not reported |
| Alpine | openssl | apk | 3.24 | 3.5.5-r0 | Not reported | ALPINE-CVE-2025-15467 | Not reported |
| Suse | openssl-3 | rpm | linux micro 6.0 | 3.1.4-11.1 | Not reported | SUSE-SU-2026:20349-1 | Not reported |
| Suse | openssl-3 | rpm | linux micro 6.1 | 3.1.4-slfo.1.1_8.1 | Not reported | SUSE-SU-2026:20373-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise server 15 sp6-ltss | 3.1.4-150600.5.42.1 | Not reported | SUSE-SU-2026:0312-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise server for sap applications 15 sp6 | 3.1.4-150600.5.42.1 | Not reported | SUSE-SU-2026:0312-1 | Not reported |
| Opensuse | openssl-3 | rpm | leap 15.6 | 3.1.4-150600.5.42.1 | Not reported | SUSE-SU-2026:0312-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise high performance computing 15 sp5-espos | 3.0.8-150500.5.57.1 | Not reported | SUSE-SU-2026:0311-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise high performance computing 15 sp5-ltss | 3.0.8-150500.5.57.1 | Not reported | SUSE-SU-2026:0311-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise server 15 sp5-ltss | 3.0.8-150500.5.57.1 | Not reported | SUSE-SU-2026:0311-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise server for sap applications 15 sp5 | 3.0.8-150500.5.57.1 | Not reported | SUSE-SU-2026:0311-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise micro 5.3 | 3.0.8-150400.4.78.1 | Not reported | SUSE-SU-2026:0310-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise micro 5.4 | 3.0.8-150400.4.78.1 | Not reported | SUSE-SU-2026:0310-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise high performance computing 15 sp4-espos | 3.0.8-150400.4.78.1 | Not reported | SUSE-SU-2026:0310-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise high performance computing 15 sp4-ltss | 3.0.8-150400.4.78.1 | Not reported | SUSE-SU-2026:0310-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise server 15 sp4-ltss | 3.0.8-150400.4.78.1 | Not reported | SUSE-SU-2026:0310-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise server for sap applications 15 sp4 | 3.0.8-150400.4.78.1 | Not reported | SUSE-SU-2026:0310-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise module for basesystem 15 sp7 | 3.2.3-150700.5.24.1 | Not reported | SUSE-SU-2026:0309-1 | Not reported |
| Ubuntu | openssl | deb | 22.04 | 3.0.2-0ubuntu1.21 | Not reported | UBUNTU-CVE-2025-15467 | Not reported |
| Ubuntu | openssl | deb | pro | 3.0.2-0ubuntu1.21+Fips1 | Not reported | UBUNTU-CVE-2025-15467 | Not reported |
| Ubuntu | openssl-fips | deb | pro | 3.0.13-0ubuntu3.12+Fips1 | Not reported | UBUNTU-CVE-2025-15467 | Not reported |
| Ubuntu | openssl | deb | 24.04 | 3.0.13-0ubuntu3.7 | Not reported | UBUNTU-CVE-2025-15467 | Not reported |
| Ubuntu | openssl | deb | 25.10 | 3.5.3-1ubuntu3 | Not reported | UBUNTU-CVE-2025-15467 | Not reported |
| Ubuntu | openssl | deb | 26.04 | 3.5.5-1ubuntu1 | Not reported | UBUNTU-CVE-2025-15467 | Not reported |
OpenFactory catalog packages
Die Paketzuordnung läuft.
[Debian 12 (Bookworm)]
- [libssl3]Unbekannt
Quellpaket: [openssl]
Details (6)
3.0.20-1~deb12u2· amd64 · bookwormBehoben · Behoben:
3.0.18-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.20-1~deb12u2· arm64 · bookwormBehoben · Behoben:
3.0.18-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.20-1~deb12u2· amd64 · bookworm-securityBehoben · Behoben:
3.0.18-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.20-1~deb12u2· arm64 · bookworm-securityBehoben · Behoben:
3.0.18-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.17-1~deb12u2· amd64 · bookworm-updatesBetroffen · Behoben:
3.0.18-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.17-1~deb12u2· arm64 · bookworm-updatesBetroffen · Behoben:
3.0.18-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
- [libssl-dev]Unbekannt
Quellpaket: [openssl]
Details (6)
3.0.20-1~deb12u2· amd64 · bookwormBehoben · Behoben:
3.0.18-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.20-1~deb12u2· arm64 · bookwormBehoben · Behoben:
3.0.18-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.20-1~deb12u2· amd64 · bookworm-securityBehoben · Behoben:
3.0.18-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.20-1~deb12u2· arm64 · bookworm-securityBehoben · Behoben:
3.0.18-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.17-1~deb12u2· amd64 · bookworm-updatesBetroffen · Behoben:
3.0.18-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.17-1~deb12u2· arm64 · bookworm-updatesBetroffen · Behoben:
3.0.18-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
- [libssl-doc]Unbekannt
Quellpaket: [openssl]
Details (6)
3.0.20-1~deb12u2· all · bookwormBehoben · Behoben:
3.0.18-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.20-1~deb12u2· all · bookwormBehoben · Behoben:
3.0.18-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.20-1~deb12u2· all · bookworm-securityBehoben · Behoben:
3.0.18-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.20-1~deb12u2· all · bookworm-securityBehoben · Behoben:
3.0.18-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.17-1~deb12u2· all · bookworm-updatesBetroffen · Behoben:
3.0.18-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.17-1~deb12u2· all · bookworm-updatesBetroffen · Behoben:
3.0.18-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
- [openssl]Unbekannt
Details (6)
3.0.20-1~deb12u2· amd64 · bookwormBehoben · Behoben:
3.0.18-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.20-1~deb12u2· arm64 · bookwormBehoben · Behoben:
3.0.18-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.20-1~deb12u2· amd64 · bookworm-securityBehoben · Behoben:
3.0.18-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.20-1~deb12u2· arm64 · bookworm-securityBehoben · Behoben:
3.0.18-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.17-1~deb12u2· amd64 · bookworm-updatesBetroffen · Behoben:
3.0.18-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.17-1~deb12u2· arm64 · bookworm-updatesBetroffen · Behoben:
3.0.18-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
[Debian 13 (Trixie)]
- [libssl3t64]Unbekannt
Quellpaket: [openssl]
Details (6)
3.5.6-1~deb13u2· amd64 · trixieBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.6-1~deb13u2· arm64 · trixieBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.6-1~deb13u2· amd64 · trixie-security · Historical versionBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u2· amd64 · trixie-security · Historical versionBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u2· arm64 · trixie-securityBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u3· amd64 · trixie-securityBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
- [libssl-dev]Unbekannt
Quellpaket: [openssl]
Details (6)
3.5.6-1~deb13u2· amd64 · trixieBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.6-1~deb13u2· arm64 · trixieBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.6-1~deb13u2· amd64 · trixie-security · Historical versionBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u2· amd64 · trixie-security · Historical versionBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u2· arm64 · trixie-securityBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u3· amd64 · trixie-securityBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
- [libssl-doc]Unbekannt
Quellpaket: [openssl]
Details (6)
3.5.6-1~deb13u2· all · trixieBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.6-1~deb13u2· all · trixieBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.6-1~deb13u2· all · trixie-security · Historical versionBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u2· all · trixie-securityBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u2· all · trixie-security · Historical versionBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u3· all · trixie-securityBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
- [openssl]Unbekannt
Details (6)
3.5.6-1~deb13u2· amd64 · trixieBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.6-1~deb13u2· arm64 · trixieBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.6-1~deb13u2· amd64 · trixie-security · Historical versionBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u2· amd64 · trixie-security · Historical versionBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u2· arm64 · trixie-securityBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u3· amd64 · trixie-securityBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
- [openssl-provider-fips]Unbekannt
Quellpaket: [openssl]
Details (6)
3.5.6-1~deb13u2· amd64 · trixieBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.6-1~deb13u2· arm64 · trixieBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.6-1~deb13u2· amd64 · trixie-security · Historical versionBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u2· amd64 · trixie-security · Historical versionBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u2· arm64 · trixie-securityBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u3· amd64 · trixie-securityBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
- [openssl-provider-legacy]Unbekannt
Quellpaket: [openssl]
Details (6)
3.5.6-1~deb13u2· amd64 · trixieBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.6-1~deb13u2· arm64 · trixieBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.6-1~deb13u2· amd64 · trixie-security · Historical versionBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u2· amd64 · trixie-security · Historical versionBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u2· arm64 · trixie-securityBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u3· amd64 · trixie-securityBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
Beobachtet:
Referenzen
- [https://access.redhat.com/errata/RHSA-2026:1496]
- [https://ftp.suse.com/pub/projects/security/]
- [https://nvd.nist.gov/vuln/detail/CVE-2025-15467]
- [https://osv.dev/vulnerability/ALPINE-CVE-2025-15467]
- [https://osv.dev/vulnerability/DSA-6113-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:0309-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:0310-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:0311-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:0312-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:20349-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:20373-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2025-15467]
- [https://psirt.abb.com/csaf/2026/3adr011536.json]
- [https://security-tracker.debian.org/tracker/CVE-2025-15467]
- [https://ubuntu.com/security/notices/USN-7980-1]
- [https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1194.json]
[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]