Skip to content
OpenAdvisories
Medium · 6.1 Public exploit CVE-2025-11187 EUVD-2025-206402GHSA-hpc7-gcqm-58fv

Improper validation of PBMAC1 parameters in PKCS#12 MAC verification

Published Jan 27, 2026 · Updated Mar 20, 2026 · Assigned by openssl

Vendor: OpenSSL Product: OpenSSL Package: nodejs Package: openssl Package: openssl Package: openssl Package: openssl Ecosystem: Alpine Ecosystem: Debian Ecosystem: Ubuntu Ecosystem: Wolfi

Description

Issue summary: PBMAC1 parameters in PKCS#12 files are missing validation
which can trigger a stack-based buffer overflow, invalid pointer or NULL
pointer dereference during MAC verification.

Impact summary: The stack buffer overflow or NULL pointer dereference may
cause a crash leading to Denial of Service for an application that parses
untrusted PKCS#12 files. The buffer overflow may also potentially enable
code execution depending on platform mitigations.

When verifying a PKCS#12 file that uses PBMAC1 for the MAC, the PBKDF2
salt and keylength parameters from the file are used without validation.
If the value of keylength exceeds the size of the fixed stack buffer used
for the derived key (64 bytes), the key derivation will overflow the buffer.
The overflow length is attacker-controlled. Also, if the salt parameter is
not an OCTET STRING type this can lead to invalid or NULL pointer
dereference.

Exploiting this issue requires a user or application to process
a maliciously crafted PKCS#12 file. It is uncommon to accept untrusted
PKCS#12 files in applications as they are usually used to store private
keys which are trusted by definition. For this reason the issue was assessed
as Moderate severity.

The FIPS modules in 3.6, 3.5 and 3.4 are not affected by this issue, as
PKCS#12 processing is outside the OpenSSL FIPS module boundary.

OpenSSL 3.6, 3.5 and 3.4 are vulnerable to this issue.

OpenSSL 3.3, 3.0, 1.1.1 and 1.0.2 are not affected by this issue as they do
not support PBMAC1 in PKCS#12.

Affected products

VendorProductAffectedFixed
OpenSSL OpenSSL 3.6.0 – < 3.6.1, 3.5.0 – < 3.5.5, 3.4.0 – < 3.4.4 3.6.1

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 openssl 3.5.5-1 —
Debian 13 openssl 3.5.4-1~deb13u2 —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.04 LTS openssl 3.5.5-1ubuntu1 —
Ubuntu 25.10 openssl 3.5.3-1ubuntu3 USN-7980-1
Ubuntu 24.04 LTS openssl 3.0.13-0ubuntu3.7 USN-7980-1
Ubuntu 22.04 LTS openssl 3.0.2-0ubuntu1.21 USN-7980-1
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 22.04 LTS nodejs No fix yet —
Ubuntu Pro 18.04 LTS nodejs No fix yet —
Ubuntu Pro 16.04 LTS nodejs No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 10 openssl +3 1:3.5.1-7.el10_1 RHSA-2026:1472
RHEL 9 openssl +3 1:3.5.1-7.el9_7 RHSA-2026:1473
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 10.0 EUS openssl +3 1:3.2.2-16.el10_0.6 RHSA-2026:1496
Red Hat Hardened Images 1 openssl +5 3.5.6-0.1.hum1 RHSA-2026:7261

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 openssl +3 1:3.5.1-7.el10_1.alma.1 ALSA-2026:1472
AlmaLinux 9 openssl +3 1:3.5.1-7.el9_7 ALSA-2026:1473

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 10 openssl 1:3.5.1-7.el10_1 RLSA-2026:1472
Rocky Linux 9 openssl 1:3.5.1-7.el9_7 RLSA-2026:1473

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES for SAP 16.0 openssl-3 3.5.0-160000.5.1 SUSE-SU-2026:20223-1
SLES for SAP 16.0 openssl-3-livepatches 0.3-160000.1.1 SUSE-SU-2026:20607-1
SLES 16.0 openssl-3 3.5.0-160000.5.1 SUSE-SU-2026:20223-1
SLES 16.0 openssl-3-livepatches 0.3-160000.1.1 SUSE-SU-2026:20607-1
SLE Micro 6.2 openssl-3 3.5.0-160000.5.1 SUSE-SU-2026:20211-1
SLE Micro 6.2 openssl-3-livepatches 0.3-160000.1.1 SUSE-SU-2026:20542-1
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLE Micro 6.1 openssl-3-livepatches 0.4-slfo.1.1_1.1 SUSE-SU-2026:22143-1
SLE Live Patching 15 SP7 openssl-3-livepatches 0.4-150700.16.6.1 SUSE-SU-2026:2662-1
SLE Live Patching 15 SP6 openssl-3-livepatches 0.4-150600.13.11.1 SUSE-SU-2026:2411-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed openssl-3 3.5.3-2.1 openSUSE-SU-2026:10237-1
openSUSE Leap 16.0 openssl-3 3.5.0-160000.5.1 openSUSE-SU-2026:20152-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 openssl 3.5.5-r0 —
Alpine v3.23 openssl 3.5.5-r0 —
Alpine v3.22 openssl 3.5.5-r0 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 10 openssl +3 1:3.5.1-7.0.1.el10_1 ELSA-2026-1472
Oracle Linux 9 openssl +3 1:3.5.1-7.0.1.el9_7 ELSA-2026-50075, ELSA-2026-1473

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling openssl 3.6.1-r0 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

  • metadust/CVE-2025-11187 ★ 0 · Mar 15, 2026

    Stack buffer overflow in PKCS#12 PBMAC1 PBKDF2 keylength (OpenSSL 3.X)

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 25

References