Skip to content
OpenAdvisories
Critical USN-7786-1 3 CVEs

openssl, openssl1.0 vulnerabilities

Published Sep 30, 2025 · Updated Nov 9, 2026

Ecosystem: Ubuntu

Summary

Stanislav Fort discovered that OpenSSL incorrectly handled memory when
trying to decrypt CMS messages encrypted with password-based encryption. An
attacker could possibly use this issue to cause a denial of service or
execute arbitrary code. (CVE-2025-9230)

Stanislav Fort discovered that OpenSSL had a timing side-channel in SM2
signature computations on ARM platforms. A remote attacker could possibly
use this issue to recover private data. This issue only affected Ubuntu
25.04. (CVE-2025-9231)

Stanislav Fort discovered that OpenSSL incorrectly handled memory during
HTTP requests when "no_proxy" environment variable is set. An attacker
could possibly use this issue to cause a denial of service. This issue only
affected Ubuntu 25.04. (CVE-2025-9232)

Fixed packages 7

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS openssl 3.0.2-0ubuntu1.20
Ubuntu · 24.04 LTS 24.04:LTS openssl 3.0.13-0ubuntu3.6
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS openssl 1.0.1f-1ubuntu2.27+esm11
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS openssl 1.0.2g-1ubuntu4.20+esm13
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS openssl 1.1.1-1ubuntu2.1~18.04.23+esm6
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS openssl1.0 1.0.2n-1ubuntu5.13+esm2
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS openssl 1.1.1f-1ubuntu2.24+esm1

Vulnerabilities 3

  • Critical 9.8
    CVE-2025-9230

    Out-of-bounds read & write in RFC 3211 KEK Unwrap

    Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 5.9
    CVE-2025-9231

    Timing side-channel in SM2 algorithm on 64 bit ARM

    Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm implementation on 64 bit ARM platforms. Impact summary: A timing side-channel in SM2 signature computations on 64 bit ARM platfor…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Alpine Wolfi
  • Medium 5.9
    CVE-2025-9232

    Out-of-bounds read in HTTP client no_proxy handling

    Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'no_proxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An ou…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi

References

  • report
    https://ubuntu.com/security/CVE-2025-9230
  • report
    https://ubuntu.com/security/CVE-2025-9231
  • report
    https://ubuntu.com/security/CVE-2025-9232