Skip to main content

OpenSSL CVE-2025-27587

| EUVDEUVD-2025-18430 MEDIUM
Covert Timing Channel (CWE-385)
2025-06-16 cve@mitre.org
5.3
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.3 MEDIUM
AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Ubuntu
LOW
qualitative
SUSE
MEDIUM
qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Network
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

4
Patch released
Mar 31, 2026 - 21:13 nvd
Patch available
EUVD ID Assigned
Mar 14, 2026 - 21:59 euvd
EUVD-2025-18430
Analysis Generated
Mar 14, 2026 - 21:59 vuln.today
CVE Published
Jun 16, 2025 - 22:15 nvd
MEDIUM 5.3

DescriptionCVE.org

OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable to a Minerva attack, exploitable by measuring the time of signing of random messages using the EVP_DigestSign API, and then using the private key to extract the K value (nonce) from the signatures. Next, based on the bit size of the extracted nonce, one can compare the signing time of full-sized nonces to signatures that used smaller nonces, via statistical tests. There is a side-channel in the P-364 curve that allows private key extraction (also, there is a dependency between the bit size of K and the size of the side channel). NOTE: This CVE is disputed because the OpenSSL security policy explicitly notes that any side channels which require same physical system to be detected are outside of the threat model for the software. The timing signal is so small that it is infeasible to be detected without having the attacking process running on the same physical system.

AnalysisAI

A security vulnerability in OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture (CVSS 5.3). Remediation should follow standard vulnerability management procedures.

Technical ContextAI

Vulnerability type not specified by vendor. Affects OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture.

RemediationAI

Monitor vendor channels for patch availability.

CVE-2014-0160 HIGH POC
7.5 Apr 07

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

CVE-2014-0195 MEDIUM POC
6.8 Jun 05

The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0

CVE-2014-0224 HIGH POC
7.4 Jun 05

OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCiph

CVE-2016-0800 MEDIUM POC
5.9 Mar 01

The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to se

CVE-2015-0204 MEDIUM POC
4.3 Jan 09

The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k

CVE-2014-3566 LOW POC
3.4 Oct 15

The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which mak

CVE-2016-2107 MEDIUM POC
5.9 May 05

The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a

CVE-2015-1793 MEDIUM POC
6.5 Jul 09

The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly

CVE-2022-3602 HIGH
7.5 Nov 01

A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Rated hig

CVE-2014-3470 MEDIUM
4.3 Jun 05

The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before

CVE-2017-3730 HIGH POC
7.5 May 04

In OpenSSL 1.1.0 before 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this

CVE-2016-8610 HIGH
7.5 Nov 13

A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL proto

Vendor StatusVendor

Ubuntu

Priority: Low
openssl1.0
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream needs-triage -
questing DNE -
bionic not-affected 3.x only
nodejs
Release Status Version
trusty not-affected uses system openssl
focal not-affected uses system openssl
noble not-affected uses system openssl
oracular not-affected uses system openssl
plucky not-affected uses system openssl
upstream needs-triage -
bionic ignored disputed by OpenSSL develpers
jammy ignored disputed by OpenSSL develpers
xenial ignored disputed by OpenSSL develpers
questing not-affected uses system openssl
edk2
Release Status Version
upstream needs-triage -
oracular ignored end of life, was needs-triage
bionic not-affected powerpc only
focal not-affected powerpc only
jammy not-affected powerpc only
noble not-affected powerpc only
plucky not-affected powerpc only
xenial not-affected powerpc only
questing not-affected powerpc only
openssl
Release Status Version
oracular ignored end of life, was needs-triage
plucky not-affected 3.4.1-1ubuntu3
bionic not-affected 3.x only
focal not-affected 3.x only
jammy ignored disputed by OpenSSL develpers
noble ignored disputed by OpenSSL develpers
upstream released 3.4.2,3.5.0
questing not-affected 3.5.2-1ubuntu1
trusty not-affected 3.x only
xenial not-affected 3.x only

Debian

openssl
Release Status Fixed Version Urgency
bullseye vulnerable 1.1.1w-0+deb11u1 -
bullseye (security) vulnerable 1.1.1w-0+deb11u5 -
bookworm vulnerable 3.0.18-1~deb12u1 -
bookworm (security) vulnerable 3.0.18-1~deb12u2 -
trixie fixed 3.5.5-1~deb13u1 -
trixie (security) fixed 3.5.4-1~deb13u2 -
forky fixed 3.5.5-1 -
sid fixed 3.6.1-2 -
(unstable) fixed 3.5.0-1 unimportant

SUSE

Severity: Medium
Product Status
Container bci/dotnet-aspnet:9.0 Container bci/dotnet-runtime:9.0 Container bci/dotnet-sdk:9.0 Container bci/gcc:14.2-10.16 Container bci/golang:oldstable-2.71.13 Container bci/nodejs:22.13.1-34.3 Container bci/php-apache:8.3.19-10.14 Container bci/php-fpm:8.3.19-10.14 Container bci/php:8.3.19-10.14 Container bci/ruby:3.4-10.13 Container bci/rust:1.86.0-2.2.18 Container bci/rust:1.87.0-1.3.13 Container suse/kiosk/pulseaudio:17 Container suse/manager/5.0/x86_64/proxy-httpd:5.0.4.7.17.1 Container suse/manager/5.0/x86_64/proxy-squid:5.0.4.7.17.1 Container suse/manager/5.0/x86_64/proxy-ssh:5.0.4.7.17.1 Container suse/manager/5.0/x86_64/server-hub-xmlrpc-api:5.0.4.6.17.1 Container suse/manager/5.0/x86_64/server-migration-14-16:5.0.4.7.17.1 Container suse/nginx:1.21-61.12 Container suse/pcp:6 Container suse/rmt-server:2.22-71.14 Container trento/trento-wanda:1.5.0-build1.29.1 Container trento/trento-web:2.5.0-build4.52.1 Affected
Container bci/kiwi:9.24.43-16.20 Container suse/multi-linux-manager/5.1/x86_64/proxy-salt-broker:5.1.0.7.32 Container suse/multi-linux-manager/5.1/x86_64/proxy-tftpd:5.1.0.6.19 Container suse/multi-linux-manager/5.1/x86_64/server-attestation:5.1.0.6.20 Container suse/multi-linux-manager/5.1/x86_64/server-saline:5.1.2.9.13.1 Container suse/multi-linux-manager/5.1/x86_64/server:5.1.0.6.40 Image proxy-salt-broker-image Image proxy-tftpd-image Image server-attestation-image Image server-image Image server-saline-image Affected
Container bci/openjdk-devel:17.0.15.0-7.20 Container bci/openjdk-devel:25.0.1.0-2.1 Container bci/openjdk:17.0.15.0-7.19 Container bci/openjdk:25.0.1.0-2.1 Container bci/python:3.6.15-71.15 Container suse/389-ds:2.5.3-61.13 Container suse/manager/5.0/x86_64/proxy-salt-broker:5.0.4.7.19.1 Container suse/manager/5.0/x86_64/proxy-tftpd:5.0.4.7.17.1 Container suse/manager/5.0/x86_64/server-attestation:5.0.4.6.17.1 Container suse/manager/5.0/x86_64/server:5.0.4.7.24.1 Affected
Container containers/lmcache-lmstack-router:0.1.6-1.2 Container containers/lmcache-vllm-openai:0.3.2-1.2 Container containers/open-webui-mcpo:0.0.17-1.1 Container containers/open-webui-pipelines:0.20250329.151219-3.2 Container containers/open-webui:0.5.14-9.52 Container containers/vllm-openai:0.9.1-1.2 Container private-registry/harbor-nginx:1.21.5-2.15 Container suse/helm:3.18.3-61.5 Container suse/mariadb:10.11 Container suse/registry:2.8 Image SLES15-SP6 Image SLES15-SP6-Azure-3P Image SLES15-SP6-Azure-Basic Image SLES15-SP6-Azure-Standard Image SLES15-SP6-BYOS Image SLES15-SP6-BYOS-Azure Image SLES15-SP6-BYOS-EC2 Image SLES15-SP6-BYOS-GCE Image SLES15-SP6-CHOST-BYOS Image SLES15-SP6-CHOST-BYOS-Aliyun Image SLES15-SP6-CHOST-BYOS-Azure Image SLES15-SP6-CHOST-BYOS-EC2 Image SLES15-SP6-CHOST-BYOS-GCE Image SLES15-SP6-CHOST-BYOS-GDC Image SLES15-SP6-CHOST-BYOS-SAP-CCloud Image SLES15-SP6-EC2 Image SLES15-SP6-EC2-ECS-HVM Image SLES15-SP6-GCE Image SLES15-SP6-HPC Image SLES15-SP6-HPC-Azure Image SLES15-SP6-HPC-BYOS Image SLES15-SP6-HPC-BYOS-Azure Image SLES15-SP6-HPC-BYOS-EC2 Image SLES15-SP6-HPC-BYOS-GCE Image SLES15-SP6-HPC-EC2 Image SLES15-SP6-HPC-GCE Image SLES15-SP6-Hardened-BYOS Image SLES15-SP6-Hardened-BYOS-Azure Image SLES15-SP6-Hardened-BYOS-EC2 Image SLES15-SP6-Hardened-BYOS-GCE Image SLES15-SP6-SAP-Azure-3P Image SLES15-SP6-SAP-BYOS Image SLES15-SP6-SAP-BYOS-Azure Image SLES15-SP6-SAP-BYOS-EC2 Image SLES15-SP6-SAP-BYOS-GCE Image SLES15-SP6-SAP-Hardened Image SLES15-SP6-SAP-Hardened-Azure Image SLES15-SP6-SAP-Hardened-BYOS Image SLES15-SP6-SAP-Hardened-BYOS-Azure Image SLES15-SP6-SAP-Hardened-BYOS-EC2 Image SLES15-SP6-SAP-Hardened-BYOS-GCE Image SLES15-SP6-SAP-Hardened-EC2 Image SLES15-SP6-SAP-Hardened-GCE Image ai_15_6 Affected
Container containers/milvus:2.4.6-7.107 Container containers/ollama:0.6.8-10.1 Container containers/pytorch:2.7.0-nvidia-2.2 Container private-registry/harbor-db:2.12.2-2.16 Container private-registry/harbor-valkey:8.0.2-2.17 Container suse/bind:9.20.9-61.11 Container suse/git:2 Container suse/kiosk/firefox-esr:esr Container suse/kiosk/xorg:21 Container suse/mariadb-client:10.11 Container suse/postgres:16.9-71.3 Container suse/postgres:18.1-61.1 Container suse/stunnel:5.70-61.11 Container suse/valkey:8.0.2-61.10 Image pr_15_6 Affected

Share

CVE-2025-27587 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy