¡¾·ì϶¹«¸æ¡¿OpenSSL CMSÄ£¿éÕ»»º³åÇøÒç¶Âí½Å(CVE-2025-15467)

°ä²¼¹¦·ò 2026-01-30

Ò»¡¢·ì϶¸ÅÊö


·ìϼûû³Æ

OpenSSL CMSÄ£¿éÕ»»º³åÇøÒç¶Âí½Å

CVE   ID

CVE-2025-15467

·ì϶ÀàÐÍ

Õ»»º³åÇøÒç³ö

·¢ÏÖ¹¦·ò

2026-1-30

·ì϶ÆÀ·Ö

9.8

·ì϶µÈ¼¶

ÑϳÁ

¹¥»÷ÏòÁ¿

ÍøÂç

ËùÐèȨÏÞ

ÎÞ

ÀûÓÃÄѶÈ

µÍ

Óû§½»»¥

²»±ØÒª

PoC/EXP

Òѹ«¿ª

ÔÚÒ°ÀûÓÃ

δ·¢ÏÖ


OpenSSLÊÇÒ»¸ö¿í·ºÊ¹ÓõĿªÔ´¼ÓÃܿ⠣¬ÌṩʵÏÖ°²È«Í¨Ñ¶ºÍ̸µÄ¹¤¾ßºÍ¿â £¬Ö§³Ö¶àÖÖ¼ÓÃÜËã·¨ £¬Ô̺¬¶Ô³Æ¼ÓÃÜ¡¢·Ç¶Ô³Æ¼ÓÃÜ¡¢¹þÏ£Ëã·¨ºÍÊý×ÖÖ¤Êé´¦ÖõÈ¡£ËüÊǺܶ໥ÁªÍøºÍ̸£¨ÈçSSL/TLS£©ºÍÀûÓ÷¨Ê½µÄ»ù´¡×é¼þ £¬¿í·ºÀûÓÃÓÚWeb·þÎñÆ÷¡¢µç×ÓÓʼþ¡¢Ðé¹¹¸öÈËÍøÂ磨VPN£©µÈÁìÓò¡£OpenSSLÒÔÆä¸ßЧ¡¢½Ã½ÝºÍ׳´óµÄÖ°ÄܳÉΪ¿ªÔ´¼ÓÃܽâ¾ö¹æ»®µÄÐÐÒµ³ß¶È £¬²¢Ìṩ¿ª·¢Õß¶ØÄÀµÄAPI½Ó¿ÚÓÃÓÚ¼ÓÃܲÙ×÷ºÍ°²È«Í¨Ñ¶¡£


2026Äê1ÔÂ30ÈÕ £¬±¦ÔËÀ³¹Ù·½ÍøÕ¾¼¯ÍÅVSRC¼à²âµ½OpenSSLÖеÄÒ»¸ö¸ßΣջ»º³åÇøÒç¶Âí½Å £¬´æÔÚÓÚ½âÎöCMS£¨¼ÓÃÜÐÂÎÅÓï·¨£©AuthEnvelopedData½á¹¹Ê±¡£¸Ã·ì϶ԴÓÚOpenSSLÔÚ´¦ÖÃʹÓÃAEAD¼ÓÃÜËã·¨£¨ÈçAES-GCM£©µÄÐÂÎÅʱ £¬Î´¶ÔASN.1²ÎÊýÖеijõʼ»¯ÏòÁ¿£¨IV£©³¤¶È½øÐÐУÑé £¬Ö±½Ó½«Æä¸´Ôìµ½¹Ì¶¨´óÓ×µÄÕ»»º³åÇøÖÐ £¬µ¼ÖÂÕ»Òç³ö¡£ÓÉÓڸùý³Ì²úÉúÔÚÉí·ÝÑéÖ¤ºÍÆëÈ«ÐÔУÑé֮ǰ £¬¹¥»÷ÕßÄܹ»»ú¹ØÌØÔìµÄ¶ñÒâCMSÐÂÎÅ £¬ÀûÓ󬳤IVÖµ´¥·¢Òç³ö¡£´Ë·ì϶¿ÉÄܵ¼Ö·þÎñ±ÀÀ£ £¬´Ó¶øÒý·¢»Ø¾ø·þÎñ£¨DoS£©¹¥»÷ £¬ÉõÖÁÔÚijЩÇé¿öÏ £¬¹¥»÷Õß¿Éͨ¹ýÕ»Òç³öʵÏÖÔ¶³Ì´úÂëÖ´ÐУ¨RCE£©¡£


¶þ¡¢Ó°ÏìÁìÓò


OpenSSL 3.6
OpenSSL 3.5
OpenSSL 3.4
OpenSSL 3.3
OpenSSL 3.0


Èý¡¢°²È«´ëÊ©


3.1 Éý¼¶°æ±¾


¹Ù·½ÒѰ䲼½¨¸´²¹¶¡ £¬ÒÔ½¨¸´¸Ã·ì϶¡£
OpenSSL >= 3.6.1
OpenSSL >= 3.5.5
OpenSSL >= 3.4.4
OpenSSL >= 3.3.6
OpenSSL >= 3.0.19


ÏÂÔØÁ´½Ó£ºhttps://github.com/openssl/openssl/releases/


3.2 һʱ´ëÊ©


ÔÝÎÞ¡£


3.3 ͨÓý¨Òé


? ¶¨ÆÚ¸üÐÂϵͳ²¹¶¡ £¬Ï÷¼õϵͳ·ì϶ £¬ÌáÉý·þÎñÆ÷µÄ°²È«ÐÔ¡£
¼ÓǿϵͳºÍÍøÂçµÄ½Ó¼û½ÚÔì £¬Åú¸Ä·À»ðǽսÊõ £¬¹Ø¹Ø·Ç±ØÒªµÄÀûÓö˿ڻò·þÎñ £¬Ï÷¼õ½«Î£ÏÕ·þÎñ£¨ÈçSSH¡¢RDPµÈ£©Â¶³öµ½¹«Íø £¬Ï÷¼õ¹¥»÷Ãæ¡£
ʹÓÃÆóÒµ¼¶°²È«²úÆ· £¬ÌáÉýÆóÒµµÄÍøÂ簲ȫ»úÄÜ¡£
¼ÓǿϵͳÓû§ºÍȨÏÞÖÎÀí £¬ÆôÓöà³É·ÖÈÏÖ¤»úÔìºÍ×îÓ×ȨÏÞ×¼Ôò £¬Óû§ºÍÈí¼þȨÏÞӦά³ÖÔÚ×îµÍÏÞ¶È¡£
ÆôÓÃÇ¿ÃÜÂëÕ½Êõ²¢ÉèÖÃΪ¶¨ÆÚÅú¸Ä¡£


3.4 ²Î¿¼Á´½Ó


https://nvd.nist.gov/vuln/detail/CVE-2025-15467/
https://openssl-library.org/news/secadv/20260127.txt/