Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2025-15467: Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters

69
This week
HIGH 8.8WATCHLISTUPGRADE

CVE-2025-15467 is a high-severity flaw (CVSS 8.8) affecting openssl. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote code execution. When parsing CMS (Auth)EnvelopedData structures that use AEAD ciphers such as AES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is copied into a fixed-s

Why this priority

  • High severity
  • EPSS top 1%: very likely to be exploited
  • Public exploit reference
  • CISA SSVC: automatable with total technical impact
  • On your watchlist

A fixed release or distro patch exists.

Risk facts

CVSS score8.8 (High)
Attack vectorNetwork (remote)
Attack complexityLow
Privileges neededNone
User interactionRequired
EPSS exploit chance74.8% (top 1%)
CISA exploited listNo
WeaknessCWE-787, CWE-120
Published2026-01-27
Last modified2026-10-15
Publisher (CNA): OpenSSL Software Foundation · Vendor: openssl

Share: LinkedIn · X · Reddit

Last updated 2026-10-15 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

openssl openssl UPGRADE
Affected: >= 3.0.0 and < 3.0.19 · >= 3.1.0 and < 3.3.6 · >= 3.4.0 and < 3.4.4 · >= 3.5.0 and < 3.5.5 · >= 3.6.0 and < 3.6.1
Fixed in: 3.0.19, 3.3.6, 3.4.4, 3.5.5, 3.6.1
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy openssl || rpm -q openssl || openssl --version
2. UPGRADE to 3.0.19 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade openssl
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade openssl
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

Exact fixes by distribution

Fedora 46 · proftpd · FIXED · 1.3.9e-2.fc46 · FEDORA-2026-fcb0a25c2f · source
sudo dnf upgrade --advisory=FEDORA-2026-fcb0a25c2f
Debian 12 · openssl · FIXED · 3.0.18-1~deb12u2
sudo apt update && sudo apt install --only-upgrade openssl dpkg --compare-versions "$(dpkg-query -W -f='${Version}' openssl)" ge "3.0.18-1~deb12u2" && echo PATCHED || echo STILL-VULNERABLE
Debian 13 · openssl · FIXED · 3.5.4-1~deb13u2
sudo apt update && sudo apt install --only-upgrade openssl dpkg --compare-versions "$(dpkg-query -W -f='${Version}' openssl)" ge "3.5.4-1~deb13u2" && echo PATCHED || echo STILL-VULNERABLE
RHEL 10 · openssl · FIXED · openssl-3.5.1-7.el10_1
sudo dnf upgrade --advisory=RHSA-2026:1472 rpm -q openssl
RHEL 10.0 Extended Update Support · openssl · FIXED · openssl-3.2.2-16.el10_0.6
sudo dnf upgrade --advisory=RHSA-2026:1496 rpm -q openssl
RHEL 9 · openssl · FIXED · openssl-3.5.1-7.el9_7
sudo dnf upgrade --advisory=RHSA-2026:1473 rpm -q openssl
RHEL 9.0 Update Services for SAP Solutions · openssl · FIXED · openssl-3.0.1-46.el9_0.7
sudo dnf upgrade --advisory=RHSA-2026:1733 rpm -q openssl
RHEL 9.2 Update Services for SAP Solutions · openssl · FIXED · openssl-3.0.7-18.el9_2.3
sudo dnf upgrade --advisory=RHSA-2026:1594 rpm -q openssl
Alpine 3.20 · openssl · FIXED · openssl-3.3.6-r0
apk add --upgrade openssl apk info -v openssl
Alpine 3.21 · openssl · FIXED · openssl-3.3.6-r0
apk add --upgrade openssl apk info -v openssl
Alpine 3.22 · openssl · FIXED · openssl-3.5.5-r0
apk add --upgrade openssl apk info -v openssl
Alpine 3.23 · openssl · FIXED · openssl-3.5.5-r0
apk add --upgrade openssl apk info -v openssl
Amazon Linux 2023 · see advisory · FIXED · ALAS2023-2026-1406 · source
sudo dnf update --advisory=ALAS2023-2026-1406

Public exploits and detection

Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2025-15467?

openssl: upgrade to 3.0.19, 3.3.6, 3.4.4, 3.5.5, 3.6.1. Exact commands for each OS are on this page.

Is CVE-2025-15467 being exploited?

CVE-2025-15467 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2025-15467 affect?

CVE-2025-15467 affects openssl. Severity is high (CVSS 8.8). Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or

How urgent is CVE-2025-15467?

Priority 69/100. High severity; EPSS top 1%: very likely to be exploited; Public exploit reference; CISA SSVC: automatable with total technical impact; On your watchlist

Software pages

OpenSSL vulnerabilities

Related CVEs

References

← Back to latest CVEs

Get the weekly exploited-CVE digest by emailThe CVEs being attacked this week and how to fix them. No spam, unsubscribe any time.