{"id":"EUVD-2025-23815","enisaUuid":"2048c372-39b6-324d-bba4-80336614a794","description":"A flaw was found in CIRCL\u0027s implementation of the FourQ elliptic curve. This vulnerability allows an attacker to compromise session security via low-order point injection and incorrect point validation during Diffie-Hellman key exchange.","datePublished":"Aug 6, 2025, 8:48:17 AM","dateUpdated":"Oct 27, 2026, 5:42:41 AM","baseScore":3.7,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","references":"https://access.redhat.com/security/cve/CVE-2025-8556\nhttps://bugzilla.redhat.com/show_bug.cgi?id\u003d2371624\nhttps://github.com/cloudflare/circl\nhttps://github.com/cloudflare/circl/security/advisories/GHSA-2x5j-vhc8-9cwm\nhttps://github.com/cloudflare/circl/tree/v1.6.1\n","aliases":"CVE-2025-8556\nGHSA-2x5j-vhc8-9cwm\n","assigner":"redhat","epss":0.5,"enisaIdProduct":[],"enisaIdVendor":[],"enisaIdVulnerability":[{"id":"5b482ac0-6853-3321-b502-dab7ec7c6412","vulnerability":{"id":"GHSA-2x5j-vhc8-9cwm","description":"CIRCL-Fourq: Missing and wrong validation can lead to incorrect results","datePublished":"Jun 10, 2025, 9:18:33 PM","dateUpdated":"Oct 23, 2025, 5:36:51 PM","baseScore":0.0,"references":"https://github.com/cloudflare/circl/security/advisories/GHSA-2x5j-vhc8-9cwm\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-8556\nhttps://access.redhat.com/security/cve/CVE-2025-8556\nhttps://bugzilla.redhat.com/show_bug.cgi?id\u003d2371624\nhttps://github.com/cloudflare/circl\nhttps://github.com/cloudflare/circl/tree/v1.6.1\nhttps://news.ycombinator.com/item?id\u003d45669593\nhttps://www.botanica.software/blog/cryptographic-issues-in-cloudflares-circl-fourq-implementation\n","enisa_id":"EUVD-2025-23815\n","aliases":"CVE-2025-8556\nGHSA-2x5j-vhc8-9cwm\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:50:34 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"b8a4852f-7f78-36cd-bf78-895f75152f36","vulnerability":{"id":"CVE-2025-8556","description":"A flaw was found in CIRCL\u0027s implementation of the FourQ elliptic curve. This vulnerability allows an attacker to compromise session security via low-order point injection and incorrect point validation during Diffie-Hellman key exchange.","datePublished":"Aug 6, 2025, 8:48:17 AM","dateUpdated":"Oct 27, 2026, 5:42:41 AM","status":"PUBLISHED","baseScore":3.7,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","references":"https://access.redhat.com/security/cve/CVE-2025-8556\nhttps://bugzilla.redhat.com/show_bug.cgi?id\u003d2371624\nhttps://github.com/cloudflare/circl\nhttps://github.com/cloudflare/circl/security/advisories/GHSA-2x5j-vhc8-9cwm\nhttps://github.com/cloudflare/circl/tree/v1.6.1\n","enisa_id":"EUVD-2025-23815\n","assigner":"redhat","epss":0.5,"dataProcessed":"Oct 28, 2026, 1:00:22 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"5f567fcc-5f31-3332-9f8f-e9dd32e3a3d4","advisory":{"id":"openSUSE-SU-2026:20730-1","description":"Security update for apptainer","summary":"Security update for apptainer","datePublished":"May 14, 2026, 4:09:31 PM","dateUpdated":"Sep 17, 2026, 5:32:20 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_20730-1.json\nhttps://bugzilla.suse.com/1228324\nhttps://bugzilla.suse.com/1234595\nhttps://bugzilla.suse.com/1234794\nhttps://bugzilla.suse.com/1235211\nhttps://bugzilla.suse.com/1236528\nhttps://bugzilla.suse.com/1237679\nhttps://bugzilla.suse.com/1238611\nhttps://bugzilla.suse.com/1239341\nhttps://bugzilla.suse.com/1253924\nhttps://bugzilla.suse.com/1255462\nhttps://bugzilla.suse.com/1258047\nhttps://bugzilla.suse.com/1258048\nhttps://bugzilla.suse.com/1260311\nhttps://bugzilla.suse.com/1262956\nhttps://bugzilla.suse.com/1264177\nhttps://www.suse.com/security/cve/CVE-2023-45288/\nhttps://www.suse.com/security/cve/CVE-2024-28180/\nhttps://www.suse.com/security/cve/CVE-2024-3727/\nhttps://www.suse.com/security/cve/CVE-2024-41110/\nhttps://www.suse.com/security/cve/CVE-2024-45337/\nhttps://www.suse.com/security/cve/CVE-2024-45338/\nhttps://www.suse.com/security/cve/CVE-2025-22869/\nhttps://www.suse.com/security/cve/CVE-2025-22870/\nhttps://www.suse.com/security/cve/CVE-2025-22872/\nhttps://www.suse.com/security/cve/CVE-2025-27144/\nhttps://www.suse.com/security/cve/CVE-2025-47911/\nhttps://www.suse.com/security/cve/CVE-2025-47913/\nhttps://www.suse.com/security/cve/CVE-2025-47914/\nhttps://www.suse.com/security/cve/CVE-2025-58181/\nhttps://www.suse.com/security/cve/CVE-2025-58190/\nhttps://www.suse.com/security/cve/CVE-2025-65105/\nhttps://www.suse.com/security/cve/CVE-2025-8556/\nhttps://www.suse.com/security/cve/CVE-2026-24137/\nhttps://www.suse.com/security/cve/CVE-2026-33186/\nhttps://www.suse.com/security/cve/CVE-2026-34986/\n","aliases":"CVE-2023-45288\nCVE-2024-28180\nCVE-2024-3727\nCVE-2024-41110\nCVE-2024-45337\nCVE-2024-45338\nCVE-2025-22869\nCVE-2025-22870\nCVE-2025-22872\nCVE-2025-27144\nCVE-2025-47911\nCVE-2025-47913\nCVE-2025-47914\nCVE-2025-58181\nCVE-2025-58190\nCVE-2025-65105\nCVE-2025-8556\nCVE-2026-24137\nCVE-2026-33186\nCVE-2026-34986\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"0fe1cb6c-b9b1-3531-bc28-528431d96638","product":{"name":"apptainer-sle15_7-0:1.4.5-bp160.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"3d2bcb30-d1de-3503-b55b-1a56a7e4f20b","product":{"name":"apptainer-leap-0:1.4.5-bp160.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"4e0ca265-0063-3fa4-ac33-c500b30be05e","product":{"name":"apptainer-0:1.4.5-bp160.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"b34a5af4-4813-3e56-9648-43125763e535","product":{"name":"apptainer-sle16-0:1.4.5-bp160.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"cd6e765a-bf21-306c-a1ca-cc3bb51073f6","product":{"name":"openSUSE Leap 16.0","vendor":{"name":"SUSE"}}}]}},{"id":"87f6c48e-44c5-3b6b-88fc-4004a9036061","advisory":{"id":"SUSE-SU-2026:0439-1","description":"Security update for apptainer","summary":"Security update for apptainer","datePublished":"Feb 11, 2026, 9:30:02 AM","dateUpdated":"Sep 16, 2026, 7:03:17 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_0439-1.json\nhttps://www.suse.com/support/update/announcement/2026/suse-su-20260439-1/\nhttps://lists.suse.com/pipermail/sle-security-updates/2026-February/024109.html\nhttps://bugzilla.suse.com/1237608\nhttps://bugzilla.suse.com/1238611\nhttps://bugzilla.suse.com/1239322\nhttps://bugzilla.suse.com/1241710\nhttps://bugzilla.suse.com/1253506\nhttps://bugzilla.suse.com/1253784\nhttps://bugzilla.suse.com/1253967\nhttps://bugzilla.suse.com/1255462\nhttps://bugzilla.suse.com/1257432\nhttps://www.suse.com/security/cve/CVE-2024-45310/\nhttps://www.suse.com/security/cve/CVE-2025-22869/\nhttps://www.suse.com/security/cve/CVE-2025-22870/\nhttps://www.suse.com/security/cve/CVE-2025-22872/\nhttps://www.suse.com/security/cve/CVE-2025-27144/\nhttps://www.suse.com/security/cve/CVE-2025-47913/\nhttps://www.suse.com/security/cve/CVE-2025-47914/\nhttps://www.suse.com/security/cve/CVE-2025-58181/\nhttps://www.suse.com/security/cve/CVE-2025-65105/\nhttps://www.suse.com/security/cve/CVE-2025-8556/\n","aliases":"CVE-2024-45310\nCVE-2025-22869\nCVE-2025-22870\nCVE-2025-22872\nCVE-2025-27144\nCVE-2025-47913\nCVE-2025-47914\nCVE-2025-58181\nCVE-2025-65105\nCVE-2025-8556\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"054b53eb-1c05-371c-b0ff-efcaa5bba0f9","product":{"name":"apptainer-sle15_6-1.4.5-150600.4.12.1.noarch","vendor":{"name":"SUSE"}}},{"id":"202df9f8-73b0-31c0-bfa8-421c531ff00a","product":{"name":"squashfuse-0.5.0-150600.3.2.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"289f4f69-6099-320e-af1a-bdffe662c465","product":{"name":"squashfuse-tools-0.5.0-150600.3.2.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"29d0b4a7-3b2f-3fcb-9a2f-90a2c4e034cf","product":{"name":"squashfuse-devel-0.5.0-150600.3.2.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"3e1f0ca9-34b7-33a1-b137-82f2d3ab0e8e","product":{"name":"libsquashfuse0-0.5.0-150600.3.2.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"3f9e5656-420c-349a-821c-c826edce3942","product":{"name":"libsquashfuse0-0.5.0-150600.3.2.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"400d943b-1276-3f2e-bf78-6ac65158a69c","product":{"name":"squashfuse-devel-0.5.0-150600.3.2.1.i586","vendor":{"name":"SUSE"}}},{"id":"4a54f12d-7586-36cf-a638-74ce9b974106","product":{"name":"squashfuse-0.5.0-150600.3.2.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"4c414262-dad1-3dd8-9033-8e8966864816","product":{"name":"SUSE Linux Enterprise High Performance Computing 15 SP7","vendor":{"name":"SUSE"}}},{"id":"50f5b516-dcd1-354f-8696-faec0b903824","product":{"name":"apptainer-sle16-1.4.5-150600.4.12.1.noarch","vendor":{"name":"SUSE"}}},{"id":"5f1946f1-77ee-3a6e-8fcb-81671d87a6b1","product":{"name":"squashfuse-0.5.0-150600.3.2.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"64eb3a0c-b6f8-3c59-82c2-0374d5920cc6","product":{"name":"libsquashfuse0-0.5.0-150600.3.2.1.i586","vendor":{"name":"SUSE"}}},{"id":"6c884f63-2d67-33f6-bd8c-dd0f937e203b","product":{"name":"SUSE Linux Enterprise Module for HPC 15 SP7","vendor":{"name":"SUSE"}}},{"id":"6dd2d6d7-99d1-3742-bbb2-0901e0a89fdc","product":{"name":"squashfuse-0.5.0-150600.3.2.1.s390x","vendor":{"name":"SUSE"}}},{"id":"73e3cf55-7a99-3d3e-b167-32ce309c66e9","product":{"name":"apptainer-1.4.5-150600.4.12.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"830cefa5-6d6e-3af1-b4a2-911cee5a78bb","product":{"name":"SUSE Linux Enterprise Server 15 SP6-LTSS","vendor":{"name":"SUSE"}}},{"id":"8b16e534-5733-380a-9723-61c02d6c76f1","product":{"name":"SUSE Linux Enterprise Server 15 SP6","vendor":{"name":"SUSE"}}},{"id":"a1878ca9-7ead-3814-a517-8446057e7827","product":{"name":"squashfuse-tools-0.5.0-150600.3.2.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"a36aa789-27fa-38ae-acf5-1a586f16a897","product":{"name":"apptainer-leap-1.4.5-150600.4.12.1.noarch","vendor":{"name":"SUSE"}}},{"id":"a55aefe4-3ab6-3fc0-94aa-9dc9e056d2a9","product":{"name":"squashfuse-tools-0.5.0-150600.3.2.1.s390x","vendor":{"name":"SUSE"}}},{"id":"ae500098-695a-3e52-8887-1c3354c6b2e4","product":{"name":"squashfuse-0.5.0-150600.3.2.1.i586","vendor":{"name":"SUSE"}}},{"id":"b8723845-e491-3bd0-a951-9fab2de9e68a","product":{"name":"squashfuse-devel-0.5.0-150600.3.2.1.s390x","vendor":{"name":"SUSE"}}},{"id":"c203574b-21b4-318a-8070-d914f7e40691","product":{"name":"squashfuse-tools-0.5.0-150600.3.2.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"d7629f1f-4f1c-3815-9bb8-db51b81317a7","product":{"name":"libsquashfuse0-0.5.0-150600.3.2.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"e06ed64f-c0d3-3e62-934d-1aad85c466df","product":{"name":"apptainer-1.4.5-150600.4.12.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"e6a53f40-cac9-3332-b6a0-5785ff4aa049","product":{"name":"squashfuse-devel-0.5.0-150600.3.2.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"e6cef774-f7d2-3aea-92f9-79635980e5db","product":{"name":"libsquashfuse0-0.5.0-150600.3.2.1.s390x","vendor":{"name":"SUSE"}}},{"id":"e8fb5b37-466f-3514-865f-85ca2817ba0b","product":{"name":"SUSE Linux Enterprise Server for SAP Applications 15 SP6","vendor":{"name":"SUSE"}}},{"id":"ea1bee89-e92c-34f3-8396-47acda8214ac","product":{"name":"squashfuse-tools-0.5.0-150600.3.2.1.i586","vendor":{"name":"SUSE"}}},{"id":"f39e73ec-facb-305b-988d-3b275727e89b","product":{"name":"apptainer-sle15_7-1.4.5-150600.4.12.1.noarch","vendor":{"name":"SUSE"}}},{"id":"f8317328-cc14-3c63-b2aa-2c7ffb08fcee","product":{"name":"openSUSE Leap 15.6","vendor":{"name":"SUSE"}}},{"id":"fdda0730-94a6-3659-be0b-b3d0755d5a1a","product":{"name":"squashfuse-devel-0.5.0-150600.3.2.1.ppc64le","vendor":{"name":"SUSE"}}}]}},{"id":"9b0c43a8-66d2-3fc6-b4b8-a934853c9228","advisory":{"id":"openSUSE-SU-2026:10013-1","description":"apptainer-1.4.5-1.1 on GA media","summary":"apptainer-1.4.5-1.1 on GA media","datePublished":"Jan 7, 2026, 12:00:00 AM","dateUpdated":"Sep 17, 2026, 4:49:59 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_10013-1.json\nhttps://www.suse.com/security/cve/CVE-2025-22872/\nhttps://www.suse.com/security/cve/CVE-2025-47913/\nhttps://www.suse.com/security/cve/CVE-2025-47914/\nhttps://www.suse.com/security/cve/CVE-2025-58181/\nhttps://www.suse.com/security/cve/CVE-2025-65105/\nhttps://www.suse.com/security/cve/CVE-2025-8556/\n","aliases":"CVE-2025-22872\nCVE-2025-47913\nCVE-2025-47914\nCVE-2025-58181\nCVE-2025-65105\nCVE-2025-8556\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"06f533ab-1dd9-31cb-bf8a-79720a6eb373","product":{"name":"apptainer-leap-0:1.4.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"1127c072-20f7-32d6-aa03-6860ce83cc6a","product":{"name":"apptainer-leap-0:1.4.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"12f034c7-1b5e-3a0a-aa11-2e175be56770","product":{"name":"apptainer-0:1.4.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"2a26ea38-3b30-3b63-88ce-bbd01000c0e5","product":{"name":"apptainer-sle16-0:1.4.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"30d4863a-d765-354d-bf63-6e1db5a31282","product":{"name":"apptainer-sle16-0:1.4.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"325d4767-c4a5-3565-878c-5e2cd1ac9968","product":{"name":"apptainer-sle15_7-1.4.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"3b078e7e-b559-329f-858a-8ba7964462f5","product":{"name":"apptainer-1.4.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"410d09c2-27f2-355c-ab3b-89155b2e579f","product":{"name":"apptainer-leap-0:1.4.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"4122e7f5-9ffd-3ab4-a05d-a4655166bbb1","product":{"name":"apptainer-sle16-1.4.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"41534450-6d13-3adb-a6d9-9a9ffd7036eb","product":{"name":"apptainer-sle15_7-0:1.4.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"49a181e1-06f4-3a8d-a552-d1eb8308d7de","product":{"name":"apptainer-sle16-1.4.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"4b00b85d-a5fa-3478-a298-ed23e39c0302","product":{"name":"apptainer-sle15_7-0:1.4.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"5da729d8-6389-3c65-b5b7-3a179b2281bc","product":{"name":"apptainer-sle16-1.4.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"5f584c49-6529-3510-83dc-12a3894d4794","product":{"name":"apptainer-1.4.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"644fd4a4-d2d8-3553-af69-fb053726c924","product":{"name":"apptainer-leap-1.4.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"6481bffe-1132-380c-9ea4-7735ba97c39e","product":{"name":"apptainer-sle16-0:1.4.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"66ff0264-1168-3383-82d2-a6e6b3803a21","product":{"name":"apptainer-sle15_7-0:1.4.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"72bd90a6-ea0f-323f-9c4f-015a05a13225","product":{"name":"apptainer-sle16-0:1.4.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"7b1ae988-f75b-3d76-bd77-8ddebe2829ce","product":{"name":"apptainer-0:1.4.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"869c4a1b-f942-39d1-bcb0-a97255d7d498","product":{"name":"apptainer-1.4.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"92b16123-5f8b-3715-8f1f-0db00d11b975","product":{"name":"apptainer-sle15_7-1.4.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"992dd2a5-ea1c-30e6-b4ec-148377a6f7cc","product":{"name":"apptainer-sle15_7-1.4.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"a524e41a-8285-3bad-adf0-d62493a7fc87","product":{"name":"apptainer-sle15_7-0:1.4.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"ad306fd3-7c88-3689-a790-8879a1c3a12d","product":{"name":"apptainer-1.4.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"b11baf12-6a44-37de-b18e-7d73649a1f60","product":{"name":"apptainer-leap-1.4.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"b4bd4246-0d99-37ce-a8b3-a5f85e81bd04","product":{"name":"apptainer-leap-1.4.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"bbe5d0ec-ca8b-3d36-9b1d-983e39b2eaa0","product":{"name":"apptainer-0:1.4.5-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"ca3c36c3-1c11-3fed-9f67-6c00a52774a9","product":{"name":"apptainer-0:1.4.5-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"cec1678f-887c-363e-b3fc-fa9d1690d441","product":{"name":"apptainer-sle15_7-1.4.5-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"d3e8dedf-affb-3ec5-a310-d016b1878074","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"d802a50a-a04d-3a8a-a01f-245ac02a065d","product":{"name":"apptainer-sle16-1.4.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"dbc2ef1d-fbec-3706-83eb-9093cc7ebf7e","product":{"name":"apptainer-leap-0:1.4.5-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"e91691c5-773e-3ac5-bcae-6df90f0c3ce1","product":{"name":"apptainer-leap-1.4.5-1.1.s390x","vendor":{"name":"SUSE"}}}]}}]}