Skip to main content

OpenSSL EUVDEUVD-2025-18430

| CVE-2025-27587 MEDIUM
Covert Timing Channel (CWE-385)
2025-06-16 cve@mitre.org
Information Disclosure OpenSSL Debian Ubuntu Suse
5.3
CVSS 3.1 · NVD
View

Vulnerability Assessment

Weakness
CWE
CWE-385
OWASP Top 10:2025
A06:2021 - Vulnerable and Outdated Components
ASVS 5.0
V15 - Secure Coding and Architecture Covert timing channel
Impact

CVSS 5.3. EPSS 0.1%. No patch confirmed.
Exploit ScenarioDerived

An attacker could exploit this vulnerability in OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture to compromise the security of affected deployments, potentially impacting confidentiality, integrity, or availability.
This Month Plan within 30 days. Why: MEDIUM severity (CVSS 4.0-6.9).
Patch available 0.1% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Mar 14, 2026

A security vulnerability in OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture (CVSS 5.3). Remediation should follow standard vulnerability management procedures.

Earlier versions of this analysis (1)
v1 Mar 14, 2026 - 21:59 CVSS 5.3

OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable to a Minerva attack, exploitable by measuring the time of signing of random messages using the EVP_DigestSign API, and then using

RemediationAI

Monitor vendor channels for patch availability.

Affected VersionsENISA

n/a n/a

Affects your stack

Find out whether the stacks and servers you run are on an affected version.

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Sign in to check
Technical ContextAI · show details

Vulnerability type not specified by vendor. Affects OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture.

Know when OpenSSL gets its next vulnerability

  • Watch products and get an email when something new is published
  • Check this CVE against your own stack and servers
  • Exploit and PoC references, threat intelligence from 22 sources
Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

NVD PRIMARY 5.3 MEDIUM
AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Ubuntu LOW
SUSE MEDIUM

Primary rating from NVD.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

2
Patch released
Mar 31, 2026 - 21:13 nvd
Patch available
CVE Published
Jun 16, 2025 - 22:15 nvd
MEDIUM 5.3

DescriptionCVE.org

OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable to a Minerva attack, exploitable by measuring the time of signing of random messages using the EVP_DigestSign API, and then using the private key to extract the K value (nonce) from the signatures. Next, based on the bit size of the extracted nonce, one can compare the signing time of full-sized nonces to signatures that used smaller nonces, via statistical tests. There is a side-channel in the P-364 curve that allows private key extraction (also, there is a dependency between the bit size of K and the size of the side channel). NOTE: This CVE is disputed because the OpenSSL security policy explicitly notes that any side channels which require same physical system to be detected are outside of the threat model for the software. The timing signal is so small that it is infeasible to be detected without having the attacking process running on the same physical system.

Executive ViewAI

Why It Matters

Organizations using OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture should be aware of moderate risk from CVE-2025-27587 rated CVSS 5.3. Exploitation could compromise the security of affected deployments. Organizations should apply vendor updates when available and monitor for exploitation.

Business Impact: Low
Compensating Controls

Apply vendor patch. If patching is delayed: restrict network access and enable monitoring.

Threat Intelligence Overview

EPSS Score
0.1%
Top 78% exploitable
Data Quality
6 sources
Confidence: High
EUVD NVD CVE.org EPSS Vendor GitHub

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue
Severity MEDIUM
CISA KEV No
Public POC No
EPSS 0.1%
Patch available Yes
Active threat No
Deciding rule
MEDIUM severity (CVSS 4.0-6.9)
What every action level means
Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.
Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.
This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.
This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.
Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived
Defer
Exploitation· derived
None
System Exposure· derived
Open
Automatable· derived
No
Human Impact
Low

Priority Score

26
Low Medium High Critical
KEV: 0
EPSS: 0
CVSS: +26
PoC: 0
Weaponized: 0
Threat intel: 0
Gov advisory: 0

Attack Technique

Information Disclosure MEDIUM

Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.

More in OpenSSL

View all
CVE-2014-0160 HIGH POC
7.5 Apr 07

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
CVE-2021-3711 CRITICAL POC
9.8 Aug 24

In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Rated cri
CVE-2014-0195 MEDIUM POC
6.8 Jun 05

The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0
CVE-2014-0224 HIGH POC
7.4 Jun 05

OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCiph
CVE-2016-0800 MEDIUM POC
5.9 Mar 01

The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to se
CVE-2015-0204 MEDIUM POC
4.3 Jan 09

The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k

CVE-2022-2068 HIGH
7.3 Jun 21

In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehas
CVE-2015-4000 LOW POC
3.7 May 21

The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not pro
CVE-2014-3566 LOW POC
3.4 Oct 15

The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which mak
CVE-2016-2107 MEDIUM POC
5.9 May 05

The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a

CVE-2015-1793 MEDIUM POC
6.5 Jul 09

The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly

CVE-2022-3602 HIGH
7.5 Nov 01

A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Rated hig

Same weakness CWE-385 – Covert Timing Channel

View all
CVE-2025-59425 HIGH POC
7.5
CVE-2020-25658 MEDIUM POC
5.9
CVE-2024-45192 MEDIUM POC
5.3
CVE-2026-5598 HIGH
8.9
CVE-2025-49087 MEDIUM POC
4.0
CVE-2023-3640 HIGH
7.8
CVE-2025-9231 MEDIUM
5.9
CVE-2024-25964 HIGH
7.5

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2025-68613 HIGH POC
8.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5

Vendor StatusVendor

Ubuntu

Priority: Low
openssl1.0
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream needs-triage -
questing DNE -
bionic not-affected 3.x only
nodejs
Release Status Version
trusty not-affected uses system openssl
focal not-affected uses system openssl
noble not-affected uses system openssl
oracular not-affected uses system openssl
plucky not-affected uses system openssl
upstream needs-triage -
bionic ignored disputed by OpenSSL develpers
jammy ignored disputed by OpenSSL develpers
xenial ignored disputed by OpenSSL develpers
questing not-affected uses system openssl
edk2
Release Status Version
upstream needs-triage -
oracular ignored end of life, was needs-triage
bionic not-affected powerpc only
focal not-affected powerpc only
jammy not-affected powerpc only
noble not-affected powerpc only
plucky not-affected powerpc only
xenial not-affected powerpc only
questing not-affected powerpc only
openssl
Release Status Version
oracular ignored end of life, was needs-triage
plucky not-affected 3.4.1-1ubuntu3
bionic not-affected 3.x only
focal not-affected 3.x only
jammy ignored disputed by OpenSSL develpers
noble ignored disputed by OpenSSL develpers
upstream released 3.4.2,3.5.0
questing not-affected 3.5.2-1ubuntu1
trusty not-affected 3.x only
xenial not-affected 3.x only

Debian

openssl
Release Status Fixed Version Urgency
bullseye vulnerable 1.1.1w-0+deb11u1 -
bullseye (security) vulnerable 1.1.1w-0+deb11u5 -
bookworm vulnerable 3.0.18-1~deb12u1 -
bookworm (security) vulnerable 3.0.18-1~deb12u2 -
trixie fixed 3.5.5-1~deb13u1 -
trixie (security) fixed 3.5.4-1~deb13u2 -
forky fixed 3.5.5-1 -
sid fixed 3.6.1-2 -
(unstable) fixed 3.5.0-1 unimportant

SUSE

Severity: Medium
Product Status
Container bci/dotnet-aspnet:9.0 Container bci/dotnet-runtime:9.0 Container bci/dotnet-sdk:9.0 Container bci/gcc:14.2-10.16 Container bci/golang:oldstable-2.71.13 Container bci/nodejs:22.13.1-34.3 Container bci/php-apache:8.3.19-10.14 Container bci/php-fpm:8.3.19-10.14 Container bci/php:8.3.19-10.14 Container bci/ruby:3.4-10.13 Container bci/rust:1.86.0-2.2.18 Container bci/rust:1.87.0-1.3.13 Container suse/kiosk/pulseaudio:17 Container suse/manager/5.0/x86_64/proxy-httpd:5.0.4.7.17.1 Container suse/manager/5.0/x86_64/proxy-squid:5.0.4.7.17.1 Container suse/manager/5.0/x86_64/proxy-ssh:5.0.4.7.17.1 Container suse/manager/5.0/x86_64/server-hub-xmlrpc-api:5.0.4.6.17.1 Container suse/manager/5.0/x86_64/server-migration-14-16:5.0.4.7.17.1 Container suse/nginx:1.21-61.12 Container suse/pcp:6 Container suse/rmt-server:2.22-71.14 Container trento/trento-wanda:1.5.0-build1.29.1 Container trento/trento-web:2.5.0-build4.52.1 Affected
Container bci/kiwi:9.24.43-16.20 Container suse/multi-linux-manager/5.1/x86_64/proxy-salt-broker:5.1.0.7.32 Container suse/multi-linux-manager/5.1/x86_64/proxy-tftpd:5.1.0.6.19 Container suse/multi-linux-manager/5.1/x86_64/server-attestation:5.1.0.6.20 Container suse/multi-linux-manager/5.1/x86_64/server-saline:5.1.2.9.13.1 Container suse/multi-linux-manager/5.1/x86_64/server:5.1.0.6.40 Image proxy-salt-broker-image Image proxy-tftpd-image Image server-attestation-image Image server-image Image server-saline-image Affected
Container bci/openjdk-devel:17.0.15.0-7.20 Container bci/openjdk-devel:25.0.1.0-2.1 Container bci/openjdk:17.0.15.0-7.19 Container bci/openjdk:25.0.1.0-2.1 Container bci/python:3.6.15-71.15 Container suse/389-ds:2.5.3-61.13 Container suse/manager/5.0/x86_64/proxy-salt-broker:5.0.4.7.19.1 Container suse/manager/5.0/x86_64/proxy-tftpd:5.0.4.7.17.1 Container suse/manager/5.0/x86_64/server-attestation:5.0.4.6.17.1 Container suse/manager/5.0/x86_64/server:5.0.4.7.24.1 Affected
Container containers/lmcache-lmstack-router:0.1.6-1.2 Container containers/lmcache-vllm-openai:0.3.2-1.2 Container containers/open-webui-mcpo:0.0.17-1.1 Container containers/open-webui-pipelines:0.20250329.151219-3.2 Container containers/open-webui:0.5.14-9.52 Container containers/vllm-openai:0.9.1-1.2 Container private-registry/harbor-nginx:1.21.5-2.15 Container suse/helm:3.18.3-61.5 Container suse/mariadb:10.11 Container suse/registry:2.8 Image SLES15-SP6 Image SLES15-SP6-Azure-3P Image SLES15-SP6-Azure-Basic Image SLES15-SP6-Azure-Standard Image SLES15-SP6-BYOS Image SLES15-SP6-BYOS-Azure Image SLES15-SP6-BYOS-EC2 Image SLES15-SP6-BYOS-GCE Image SLES15-SP6-CHOST-BYOS Image SLES15-SP6-CHOST-BYOS-Aliyun Image SLES15-SP6-CHOST-BYOS-Azure Image SLES15-SP6-CHOST-BYOS-EC2 Image SLES15-SP6-CHOST-BYOS-GCE Image SLES15-SP6-CHOST-BYOS-GDC Image SLES15-SP6-CHOST-BYOS-SAP-CCloud Image SLES15-SP6-EC2 Image SLES15-SP6-EC2-ECS-HVM Image SLES15-SP6-GCE Image SLES15-SP6-HPC Image SLES15-SP6-HPC-Azure Image SLES15-SP6-HPC-BYOS Image SLES15-SP6-HPC-BYOS-Azure Image SLES15-SP6-HPC-BYOS-EC2 Image SLES15-SP6-HPC-BYOS-GCE Image SLES15-SP6-HPC-EC2 Image SLES15-SP6-HPC-GCE Image SLES15-SP6-Hardened-BYOS Image SLES15-SP6-Hardened-BYOS-Azure Image SLES15-SP6-Hardened-BYOS-EC2 Image SLES15-SP6-Hardened-BYOS-GCE Image SLES15-SP6-SAP-Azure-3P Image SLES15-SP6-SAP-BYOS Image SLES15-SP6-SAP-BYOS-Azure Image SLES15-SP6-SAP-BYOS-EC2 Image SLES15-SP6-SAP-BYOS-GCE Image SLES15-SP6-SAP-Hardened Image SLES15-SP6-SAP-Hardened-Azure Image SLES15-SP6-SAP-Hardened-BYOS Image SLES15-SP6-SAP-Hardened-BYOS-Azure Image SLES15-SP6-SAP-Hardened-BYOS-EC2 Image SLES15-SP6-SAP-Hardened-BYOS-GCE Image SLES15-SP6-SAP-Hardened-EC2 Image SLES15-SP6-SAP-Hardened-GCE Image ai_15_6 Affected
Container containers/milvus:2.4.6-7.107 Container containers/ollama:0.6.8-10.1 Container containers/pytorch:2.7.0-nvidia-2.2 Container private-registry/harbor-db:2.12.2-2.16 Container private-registry/harbor-valkey:8.0.2-2.17 Container suse/bind:9.20.9-61.11 Container suse/git:2 Container suse/kiosk/firefox-esr:esr Container suse/kiosk/xorg:21 Container suse/mariadb-client:10.11 Container suse/postgres:16.9-71.3 Container suse/postgres:18.1-61.1 Container suse/stunnel:5.70-61.11 Container suse/valkey:8.0.2-61.10 Image pr_15_6 Affected

References

Advisories & patches
ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2025-27587 ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:02042/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:02236/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:15183/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:1550/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:20406/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:20417/ REF https://github.com/openssl/openssl/issues/24253 REF https://minerva.crocs.fi.muni.cz

Search Externally

GitHub PoC Exploit-DB PacketStorm Snyk Rapid7 Nuclei Templates Trickest PoC
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy