Detections
Analytics

Echo: openssl-3.5.0: security update to 3.5.0+e1

medium Tenable Cloud Security Plugin ID 478433

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - Issue summary: PBMAC1 parameters in PKCS#12 files are missing validation which can trigger a stack-based
 buffer overflow, invalid pointer or NULL pointer dereference during MAC verification. Impact summary: The
 stack buffer overflow or NULL pointer dereference may cause a crash leading to Denial of Service for an
 application that parses untrusted PKCS#12 files. The buffer overflow may also potentially enable code
 execution depending on platform mitigations. When verifying a PKCS#12 file that uses PBMAC1 for the MAC,
 the PBKDF2 salt and keylength parameters from the file are used without validation. If the value of
 keylength exceeds the size of the fixed stack buffer used for the derived key (64 bytes), the key
 derivation will overflow the buffer. The overflow length is attacker-controlled. Also, if the salt
 parameter is not an OCTET STRING type this can lead to invalid or NULL pointer dereference. Exploiting
 this issue requires a user or application to process a maliciously crafted PKCS#12 file. It is uncommon to
 accept untrusted PKCS#12 files in applications as they are usually used to store private keys which are
 trusted by definition. For this reason the issue was assessed as Moderate severity. The FIPS modules in
 3.6, 3.5 and 3.4 are not affected by this issue, as PKCS#12 processing is outside the OpenSSL FIPS module
 boundary. OpenSSL 3.6, 3.5 and 3.4 are vulnerable to this issue. OpenSSL 3.3, 3.0, 1.1.1 and 1.0.2 are not
 affected by this issue as they do not support PBMAC1 in PKCS#12. (CVE-2025-11187)

Solution

Update the openssl-3.5.0 library and its related packages to version 3.5.0+e1 or later.

See Also

https://advisory.echohq.com/cve/CVE-2025-11187

Plugin Details

Severity: Medium

ID: 478433

Version: Revision 1.1

Type: Local

Published: 11/5/2026

Updated: 11/5/2026

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

Percentile: 96.67

CVSS v2

Risk Factor: Medium

Base Score: 5.7

Temporal Score: 4.5

Vector: CVSS2#AV:L/AC:L/Au:S/C:P/I:P/A:C

CVSS Score Source: CVE-2025-11187

CVSS v3

Risk Factor: Medium

Base Score: 6.1

Temporal Score: 5.5

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 11/5/2026

Vulnerability Publication Date: 1/27/2026

Reference Information

CVE: CVE-2025-11187