Skip to content
OpenAdvisories
High · 7.3 CVE-2025-35471 EUVD-2025-14377GHSA-wv5q-x2gm-xf7j

conda-forge openssl-feedstock writable OPENSSLDIR

Published May 13, 2025 · Updated May 22, 2025 · Assigned by cisa-cg

Description

conda-forge openssl-feedstock before 066e83c (2024-05-20), on Microsoft Windows, configures OpenSSL to use an OPENSSLDIR file path that can be written to by non-privilged local users. By writing a specially crafted openssl.cnf file in OPENSSLDIR, a non-privileged local user can execute arbitrary code with the privileges of the user or process loading openssl-feedstock DLLs. Miniforge before 24.5.0 is also affected.

Affected products

VendorProductAffectedFixed
conda-forge openssl-feedstock — 066e83c
conda-forge miniforge < 24.5.0 24.5.0

References