Към съдържанието
Търсене

CVE-2026-45447: OpenSSL, грешка в паметта

8.8

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, без особени условия, с обикновен потребителски вход и без действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: няма данни за експлоатация
  • Атаката не може да се автоматизира

Описание

Оригинално описание

Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. Impact summary: A use-after-free may result in process crashes, heap corruption, or potentially remote code execution. When processing a PKCS#7 or S/MIME signed message, if the SignedData digestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may incorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent use of the BIO by the calling application results in a use-after-free condition. In the common case this occurs when the application later calls BIO_free() on the BIO originally passed to PKCS7_verify(). Depending on allocator behavior and application-specific BIO usage patterns, this may result in a crash or other memory corruption. In some application contexts this may potentially be exploitable for remote code execution. Applications that process PKCS#7 or S/MIME signed messages using OpenSSL PKCS#7 APIs may be affected. Applications using the CMS APIs for this processing are not affected. The FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary.

Засегнати продукти

  • OpenSSL OpenSSL: 4.0.0 преди 4.0.1; 3.6.0 преди 3.6.3; 3.5.0 преди 3.5.7; 3.4.0 преди 3.4.6; 3.0.0 преди 3.0.21; 1.1.1 преди 1.1.1zh; 1.0.2 преди 1.0.2zq
  • Red Hat Red Hat Enterprise Linux 10: 1:3.5.5-4.el10_2 преди *
  • Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION: 0:1.0.1e-61.el6_10.1 преди *
  • Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support: 1:1.0.2k-26.el7_9.2 преди *
  • Red Hat Red Hat Enterprise Linux 8: 1:1.0.2o-4.el8_10.3 преди *
  • Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On: 1:1.1.1k-16.el8_6 преди *
  • Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service: 1:1.0.2o-4.el8_8.1 преди *
  • Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions: 1:1.0.2o-4.el8_8.1 преди *
  • Red Hat Red Hat Enterprise Linux 9: 1:3.5.5-4.el9_8 преди *
  • Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions: 1:1.1.1k-4.el9_2.2 преди *
  • Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions: 1:1.1.1k-5.el9_4.3 преди *
  • Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support: 1:1.1.1k-5.el9_6.3 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.12: 412.86.202608241157-0 преди *
  • Red Hat Cost Management 4: 1783539156 преди *
  • Red Hat multicluster engine for Kubernetes 2.8: 1785078604 преди *
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13: 1785078581 преди *
  • Red Hat Red Hat Discovery 2: 1782159791 преди *
  • Red Hat Red Hat Insights proxy 1.5: 1782890503 преди *
  • Red Hat Red Hat Update Infrastructure 5: 1781525684 преди *
  • Red Hat Multicluster Engine for Kubernetes
  • Red Hat Red Hat Enterprise Linux 7
  • Red Hat Red Hat Hardened Images
  • Red Hat Red Hat JBoss Core Services
  • Red Hat Red Hat JBoss Web Server 6
  • Red Hat Red Hat JBoss Web Server 7
  • Red Hat Red Hat OpenShift Container Platform 4

Вид слабост

История

  • 9 юни 2026 Публикувано

Други уязвимости в OpenSSL OpenSSL

Първоизточници

CVE-2026-45447: OpenSSL, грешка в паметта | freedomonline.bg