Detections
Analytics

Echo: openssl: security update to 3.5.4-1~deb13u2

critical Tenable Cloud Security Plugin ID 464771

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD
 parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a
 crash, causing Denial of Service, or potentially remote code execution. When parsing CMS
 (Auth)EnvelopedData structures that use AEAD ciphers such as AES-GCM, the IV (Initialization Vector)
 encoded in the ASN.1 parameters is copied into a fixed-size stack buffer without verifying that its length
 fits the destination. An attacker can supply a crafted CMS message with an oversized IV, causing a stack-
 based out-of-bounds write before any authentication or tag verification occurs. Applications and services
 that parse untrusted CMS or PKCS#7 content using AEAD ciphers (e.g., S/MIME (Auth)EnvelopedData with AES-
 GCM) are vulnerable. Because the overflow occurs prior to authentication, no valid key material is
 required to trigger it. While exploitability to remote code execution depends on platform and toolchain
 mitigations, the stack-based write primitive represents a severe risk. The FIPS modules in 3.6, 3.5, 3.4,
 3.3 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module
 boundary. OpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue. OpenSSL 1.1.1 and 1.0.2 are not
 affected by this issue. (CVE-2025-15467)

Solution

Update the openssl library and its related packages to version 3.5.4-1~deb13u2 or later.

See Also

https://advisory.echohq.com/cve/CVE-2025-15467

Plugin Details

Severity: Critical

ID: 464771

Version: Revision 1.1

Type: Local

Published: 10/2/2026

Updated: 10/2/2026

Risk Information

VPR

Risk Factor: High

Score: 7.6

Percentile: 98.26

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2025-15467

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 1/28/2026

Vulnerability Publication Date: 1/27/2026

Reference Information

CVE: CVE-2025-15467

IAVA: 2026-A-0087-S