¡¾·ì϶¹«¸æ¡¿OpenSSL CMSÄ£¿éÕ»»º³åÇøÒç³ö·ì϶(CVE-2025-15467)

°ä²¼¹¦·ò 2026-01-30

Ò»¡¢¡¢·ì϶¸ÅÊö


·ì϶Ãû³Æ

OpenSSL CMSÄ£¿éÕ»»º³åÇøÒç³ö·ì϶

CVE   ID

CVE-2025-15467

·ì϶ÀàÐÍ

Õ»»º³åÇøÒç³ö

·¢ÏÖ¹¦·ò

2026-1-30

·ì϶ÆÀ·Ö

9.8

·ì϶µÈ¼¶

ÑÏÖØ

¹¥»÷ÏòÁ¿

ÍøÂç

ËùÐèȨÏÞ

ÎÞ

ÀûÓÃÄѶÈ

µÍ

Óû§½»»¥

²»±ØÒª

PoC/EXP

Òѹ«¿ª

ÔÚÒ°ÀûÓÃ

δ·¢ÏÖ


OpenSSLÊÇÒ»¸ö¿í·ºÊ¹ÓõĿªÔ´¼ÓÃܿ⣬ÌṩʵÏÖ°²È«Í¨Ñ¶ºÍ̸µÄ¹¤¾ßºÍ¿â£¬Ö§³Ö¶àÖÖ¼ÓÃÜËã·¨£¬Ô̺¬¶Ô³Æ¼ÓÃÜ¡¢¡¢·Ç¶Ô³Æ¼ÓÃÜ¡¢¡¢¹þÏ£Ëã·¨ºÍÊý×ÖÖ¤Êé´¦Öõȡ£¡£¡£ËüÊǺܶ໥ÁªÍøºÍ̸£¨ÈçSSL/TLS£©ºÍÀûÓ÷¨Ê½µÄ»ù´¡×é¼þ£¬¿í·ºÀûÓÃÓÚWeb·þÎñÆ÷¡¢¡¢µç×ÓÓʼþ¡¢¡¢Ðé¹¹¸öÈËÍøÂ磨VPN£©µÈÁìÓò¡£¡£¡£OpenSSLÒÔÆä¸ßЧ¡¢¡¢½Ã½ÝºÍ׳´óµÄÖ°ÄܳÉΪ¿ªÔ´¼ÓÃܽâ¾ö¹æ»®µÄÐÐÒµ³ß¶È£¬²¢Ìṩ¿ª·¢Õß¶ØÄÀµÄAPI½Ó¿ÚÓÃÓÚ¼ÓÃܲÙ×÷ºÍ°²È«Í¨Ñ¶¡£¡£¡£


2026Äê1ÔÂ30ÈÕ£¬OG¶«·½Ìü¼¯ÍÅVSRC¼à²âµ½OpenSSLÖеÄÒ»¸ö¸ßΣջ»º³åÇøÒç³ö·ì϶£¬´æÔÚÓÚ½âÎöCMS£¨¼ÓÃÜÐÂÎÅÓï·¨£©AuthEnvelopedData½á¹¹Ê±¡£¡£¡£¸Ã·ì϶ԴÓÚOpenSSLÔÚ´¦ÖÃʹÓÃAEAD¼ÓÃÜËã·¨£¨ÈçAES-GCM£©µÄÐÂÎÅʱ£¬Î´¶ÔASN.1²ÎÊýÖеijõʼ»¯ÏòÁ¿£¨IV£©³¤¶È½øÐÐУÑ飬ֱ½Ó½«Æä¸´ÖƵ½¹Ì¶¨¾ÞϸµÄÕ»»º³åÇøÖУ¬µ¼ÖÂÕ»Òç³ö¡£¡£¡£ÓÉÓڸùý³Ì²úÉúÔÚÉí·ÝÑéÖ¤ºÍÆëÈ«ÐÔУÑé֮ǰ£¬¹¥»÷ÕßÄܹ»»ú¹ØÌØÖƵĶñÒâCMSÐÂÎÅ£¬ÀûÓ󬳤IVÖµ´¥·¢Òç³ö¡£¡£¡£´Ë·ì϶¿ÉÄܵ¼Ö·þÎñ±ÀÀ££¬´Ó¶øÒý·¢»Ø¾ø·þÎñ£¨DoS£©¹¥»÷£¬ÉõÖÁÔÚijЩÇé¿öÏ£¬¹¥»÷Õß¿Éͨ¹ýÕ»Òç³öʵÏÖÔ¶³Ì´úÂëÖ´ÐУ¨RCE£©¡£¡£¡£


¶þ¡¢¡¢Ó°ÏìÁìÓò


OpenSSL 3.6
OpenSSL 3.5
OpenSSL 3.4
OpenSSL 3.3
OpenSSL 3.0


Èý¡¢¡¢°²È«´ëÊ©


3.1 Éý¼¶°æ±¾


¹Ù·½ÒѰ䲼ÐÞ¸´²¹¶¡£¬ÒÔÐÞ¸´¸Ã·ì϶¡£¡£¡£
OpenSSL >= 3.6.1
OpenSSL >= 3.5.5
OpenSSL >= 3.4.4
OpenSSL >= 3.3.6
OpenSSL >= 3.0.19


ÏÂÔØÁ´½Ó£º£º£ºhttps://github.com/openssl/openssl/releases/


3.2 һʱ´ëÊ©


ÔÝÎÞ¡£¡£¡£


3.3 ͨÓý¨Òé


? ¶¨ÆÚ¸üÐÂϵͳ²¹¶¡£¬Ï÷¼õϵͳ·ì϶£¬ÌáÉý·þÎñÆ÷µÄ°²È«ÐÔ¡£¡£¡£
¼ÓǿϵͳºÍÍøÂçµÄ½Ó¼û½ÚÖÆ£¬Åú¸Ä·À»ðǽսÊõ£¬¹Ø±Õ·Ç±ØÒªµÄÀûÓö˿ڻò·þÎñ£¬Ï÷¼õ½«Î£ÏÕ·þÎñ£¨ÈçSSH¡¢¡¢RDPµÈ£©Â¶³öµ½¹«Íø£¬Ï÷¼õ¹¥»÷Ãæ¡£¡£¡£
ʹÓÃÆóÒµ¼¶°²È«²úÆ·£¬ÌáÉýÆóÒµµÄÍøÂ簲ȫ»úÄÜ¡£¡£¡£
¼ÓǿϵͳÓû§ºÍȨÏÞÖÎÀí£¬ÆôÓöà³É·ÖÈÏÖ¤»úÖÆºÍ×îСȨÏÞ×¼Ôò£¬Óû§ºÍÈí¼þȨÏÞӦά³ÖÔÚ×îµÍÏÞ¶È¡£¡£¡£
ÆôÓÃÇ¿ÃÜÂëÕ½Êõ²¢ÉèÖÃΪ¶¨ÆÚÅú¸Ä¡£¡£¡£


3.4 ²Î¿¼Á´½Ó


https://nvd.nist.gov/vuln/detail/CVE-2025-15467/
https://openssl-library.org/news/secadv/20260127.txt/