CVE-2025-8556 : Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results

获取后续新漏洞提醒登录后订阅

一、漏洞 CVE-2025-8556 基础信息

漏洞信息

对漏洞内容有疑问？看看神龙的深度分析是否有帮助！

查看神龙十问 ↗

尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。

Vulnerability Title

Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results

来源: 美国国家漏洞数据库 NVD

Vulnerability Description

A flaw was found in CIRCL's implementation of the FourQ elliptic curve. This vulnerability allows an attacker to compromise session security via low-order point injection and incorrect point validation during Diffie-Hellman key exchange.

来源: 美国国家漏洞数据库 NVD

CVSS Information

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

来源: 美国国家漏洞数据库 NVD

Vulnerability Type

CWE-1287

来源: 美国国家漏洞数据库 NVD

Vulnerability Title

CIRCL 数据伪造问题漏洞

来源: 中国国家信息安全漏洞库 CNNVD

Vulnerability Description

CIRCL是Cloudflare开源的一个用 Go 编写的加密原语集合。 CIRCL存在数据伪造问题漏洞，该漏洞源于低阶点注入和点验证不当，可能破坏会话安全。

来源: 中国国家信息安全漏洞库 CNNVD

CVSS Information

N/A

来源: 中国国家信息安全漏洞库 CNNVD

Vulnerability Type

N/A

来源: 中国国家信息安全漏洞库 CNNVD

受影响产品

厂商	产品	影响版本	CPE
Red Hat	Builds for Red Hat OpenShift	-	`cpe:/a:redhat:openshift_builds:1`
Red Hat	Builds for Red Hat OpenShift	-	`cpe:/a:redhat:openshift_builds:1`
Red Hat	Builds for Red Hat OpenShift	-	`cpe:/a:redhat:openshift_builds:1`
Red Hat	Builds for Red Hat OpenShift	-	`cpe:/a:redhat:openshift_builds:1`
Red Hat	Builds for Red Hat OpenShift	-	`cpe:/a:redhat:openshift_builds:1`
Red Hat	Builds for Red Hat OpenShift	-	`cpe:/a:redhat:openshift_builds:1`
Red Hat	Custom Metric Autoscaler operator for Red Hat Openshift	-	`cpe:/a:redhat:openshift_custom_metrics_autoscaler:2`
Red Hat	Custom Metric Autoscaler operator for Red Hat Openshift	-	`cpe:/a:redhat:openshift_custom_metrics_autoscaler:2`
Red Hat	Custom Metric Autoscaler operator for Red Hat Openshift	-	`cpe:/a:redhat:openshift_custom_metrics_autoscaler:2`
Red Hat	Custom Metric Autoscaler operator for Red Hat Openshift	-	`cpe:/a:redhat:openshift_custom_metrics_autoscaler:2`
Red Hat	Custom Metric Autoscaler operator for Red Hat Openshift	-	`cpe:/a:redhat:openshift_custom_metrics_autoscaler:2`
Red Hat	Multicluster Global Hub	-	`cpe:/a:redhat:multicluster_globalhub`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Pipelines	-	`cpe:/a:redhat:openshift_pipelines:1`
Red Hat	OpenShift Serverless	-	`cpe:/a:redhat:serverless:1`
Red Hat	OpenShift Serverless	-	`cpe:/a:redhat:serverless:1`
Red Hat	OpenShift Serverless	-	`cpe:/a:redhat:serverless:1`
Red Hat	OpenShift Serverless	-	`cpe:/a:redhat:serverless:1`
Red Hat	OpenShift Service Mesh 3	-	`cpe:/a:redhat:service_mesh:3`
Red Hat	OpenShift Service Mesh 3	-	`cpe:/a:redhat:service_mesh:3`
Red Hat	OpenShift Service Mesh 3	-	`cpe:/a:redhat:service_mesh:3`
Red Hat	OpenShift Service Mesh 3	-	`cpe:/a:redhat:service_mesh:3`
Red Hat	OpenShift Service Mesh 3	-	`cpe:/a:redhat:service_mesh:3`
Red Hat	OpenShift Service Mesh 3	-	`cpe:/a:redhat:service_mesh:3`
Red Hat	OpenShift Service Mesh 3	-	`cpe:/a:redhat:service_mesh:3`
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	-	`cpe:/a:redhat:acm:2`
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	-	`cpe:/a:redhat:acm:2`
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	-	`cpe:/a:redhat:acm:2`
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	-	`cpe:/a:redhat:acm:2`
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	-	`cpe:/a:redhat:acm:2`
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	-	`cpe:/a:redhat:acm:2`
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	-	`cpe:/a:redhat:acm:2`
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	-	`cpe:/a:redhat:acm:2`
Red Hat	Red Hat Advanced Cluster Security 4	-	`cpe:/a:redhat:advanced_cluster_security:4`
Red Hat	Red Hat Advanced Cluster Security 4	-	`cpe:/a:redhat:advanced_cluster_security:4`
Red Hat	Red Hat Advanced Cluster Security 4	-	`cpe:/a:redhat:advanced_cluster_security:4`
Red Hat	Red Hat Advanced Cluster Security 4	-	`cpe:/a:redhat:advanced_cluster_security:4`
Red Hat	Red Hat Advanced Cluster Security 4	-	`cpe:/a:redhat:advanced_cluster_security:4`
Red Hat	Red Hat Advanced Cluster Security 4	-	`cpe:/a:redhat:advanced_cluster_security:4`
Red Hat	Red Hat Advanced Cluster Security 4	-	`cpe:/a:redhat:advanced_cluster_security:4`
Red Hat	Red Hat Advanced Cluster Security 4	-	`cpe:/a:redhat:advanced_cluster_security:4`
Red Hat	Red Hat Advanced Cluster Security 4	-	`cpe:/a:redhat:advanced_cluster_security:4`
Red Hat	Red Hat Advanced Cluster Security 4	-	`cpe:/a:redhat:advanced_cluster_security:4`
Red Hat	Red Hat Ceph Storage 5	-	`cpe:/a:redhat:ceph_storage:5`
Red Hat	Red Hat Ceph Storage 5	-	`cpe:/a:redhat:ceph_storage:5`
Red Hat	Red Hat Ceph Storage 6	-	`cpe:/a:redhat:ceph_storage:6`
Red Hat	Red Hat Ceph Storage 6	-	`cpe:/a:redhat:ceph_storage:6`
Red Hat	Red Hat Ceph Storage 8	-	`cpe:/a:redhat:ceph_storage:8`
Red Hat	Red Hat Ceph Storage 8	-	`cpe:/a:redhat:ceph_storage:8`
Red Hat	Red Hat Developer Hub	-	`cpe:/a:redhat:rhdh:1`
Red Hat	Red Hat Developer Hub	-	`cpe:/a:redhat:rhdh:1`
Red Hat	Red Hat Edge Manager preview	-	`cpe:/a:redhat:edge_manager:0`
Red Hat	Red Hat Edge Manager preview	-	`cpe:/a:redhat:edge_manager:0`
Red Hat	Red Hat Edge Manager preview	-	`cpe:/a:redhat:edge_manager:0`
Red Hat	Red Hat Edge Manager preview	-	`cpe:/a:redhat:edge_manager:0`
Red Hat	Red Hat Edge Manager preview	-	`cpe:/a:redhat:edge_manager:0`
Red Hat	Red Hat Edge Manager preview	-	`cpe:/a:redhat:edge_manager:0`
Red Hat	Red Hat Edge Manager preview	-	`cpe:/a:redhat:edge_manager:0`
Red Hat	Red Hat Edge Manager preview	-	`cpe:/a:redhat:edge_manager:0`
Red Hat	Red Hat Edge Manager preview	-	`cpe:/a:redhat:edge_manager:0`
Red Hat	Red Hat Edge Manager preview	-	`cpe:/a:redhat:edge_manager:0`
Red Hat	Red Hat Enterprise Linux 10	-	`cpe:/o:redhat:enterprise_linux:10`
Red Hat	Red Hat Enterprise Linux 9	-	`cpe:/o:redhat:enterprise_linux:9`
Red Hat	Red Hat Enterprise Linux AI (RHEL AI)	-	`cpe:/a:redhat:enterprise_linux_ai:1`
Red Hat	Red Hat Enterprise Linux AI (RHEL AI)	-	`cpe:/a:redhat:enterprise_linux_ai:1`
Red Hat	Red Hat Enterprise Linux AI (RHEL AI)	-	`cpe:/a:redhat:enterprise_linux_ai:1`
Red Hat	Red Hat Enterprise Linux AI (RHEL AI)	-	`cpe:/a:redhat:enterprise_linux_ai:1`
Red Hat	Red Hat Enterprise Linux AI (RHEL AI)	-	`cpe:/a:redhat:enterprise_linux_ai:1`
Red Hat	Red Hat Enterprise Linux AI (RHEL AI)	-	`cpe:/a:redhat:enterprise_linux_ai:1`
Red Hat	Red Hat Enterprise Linux AI (RHEL AI)	-	`cpe:/a:redhat:enterprise_linux_ai:1`
Red Hat	Red Hat Enterprise Linux AI (RHEL AI)	-	`cpe:/a:redhat:enterprise_linux_ai:1`
Red Hat	Red Hat Enterprise Linux AI (RHEL AI)	-	`cpe:/a:redhat:enterprise_linux_ai:1`
Red Hat	Red Hat Enterprise Linux AI (RHEL AI)	-	`cpe:/a:redhat:enterprise_linux_ai:1`
Red Hat	Red Hat OpenShift AI (RHOAI)	-	`cpe:/a:redhat:openshift_ai`
Red Hat	Red Hat OpenShift AI (RHOAI)	-	`cpe:/a:redhat:openshift_ai`
Red Hat	Red Hat OpenShift Container Platform 4	-	`cpe:/a:redhat:openshift:4`
Red Hat	Red Hat OpenShift Container Platform 4	-	`cpe:/a:redhat:openshift:4`
Red Hat	Red Hat OpenShift Container Platform 4	-	`cpe:/a:redhat:openshift:4`
Red Hat	Red Hat OpenShift Container Platform 4	-	`cpe:/a:redhat:openshift:4`
Red Hat	Red Hat OpenShift Container Platform 4	-	`cpe:/a:redhat:openshift:4`
Red Hat	Red Hat OpenShift Container Platform 4	-	`cpe:/a:redhat:openshift:4`
Red Hat	Red Hat OpenShift Container Platform 4	-	`cpe:/a:redhat:openshift:4`
Red Hat	Red Hat OpenShift Container Platform 4	-	`cpe:/a:redhat:openshift:4`
Red Hat	Red Hat OpenShift Container Platform 4	-	`cpe:/a:redhat:openshift:4`
Red Hat	Red Hat OpenShift Container Platform 4	-	`cpe:/a:redhat:openshift:4`
Red Hat	Red Hat OpenShift Container Platform 4	-	`cpe:/a:redhat:openshift:4`
Red Hat	Red Hat OpenShift Dev Workspaces Operator	-	`cpe:/a:redhat:devworkspace`
Red Hat	Red Hat OpenShift Dev Workspaces Operator	-	`cpe:/a:redhat:devworkspace`
Red Hat	Red Hat OpenShift Dev Workspaces Operator	-	`cpe:/a:redhat:devworkspace`
Red Hat	Red Hat OpenShift for Windows Containers	-	`cpe:/a:redhat:windows_machine_config`
Red Hat	Red Hat OpenShift for Windows Containers	-	`cpe:/a:redhat:windows_machine_config`
Red Hat	Red Hat OpenShift GitOps	-	`cpe:/a:redhat:openshift_gitops:1`
Red Hat	Red Hat OpenShift GitOps	-	`cpe:/a:redhat:openshift_gitops:1`
Red Hat	Red Hat OpenShift GitOps	-	`cpe:/a:redhat:openshift_gitops:1`
Red Hat	Red Hat OpenShift GitOps	-	`cpe:/a:redhat:openshift_gitops:1`
Red Hat	Red Hat OpenShift Virtualization 4	-	`cpe:/a:redhat:container_native_virtualization:4`
Red Hat	Red Hat OpenStack Platform 16.2	-	`cpe:/a:redhat:openstack:16.2`
Red Hat	Red Hat OpenStack Platform 16.2	-	`cpe:/a:redhat:openstack:16.2`
Red Hat	Red Hat OpenStack Platform 16.2	-	`cpe:/a:redhat:openstack:16.2`
Red Hat	Red Hat OpenStack Platform 17.1	-	`cpe:/a:redhat:openstack:17.1`
Red Hat	Red Hat OpenStack Platform 17.1	-	`cpe:/a:redhat:openstack:17.1`
Red Hat	Red Hat OpenStack Platform 17.1	-	`cpe:/a:redhat:openstack:17.1`
Red Hat	Red Hat Trusted Application Pipeline	-	`cpe:/a:redhat:trusted_application_pipeline:1`
Red Hat	Red Hat Trusted Artifact Signer	-	`cpe:/a:redhat:trusted_artifact_signer:1`
Red Hat	Red Hat Trusted Artifact Signer	-	`cpe:/a:redhat:trusted_artifact_signer:1`
Red Hat	Red Hat Trusted Artifact Signer	-	`cpe:/a:redhat:trusted_artifact_signer:1`
Red Hat	Red Hat Trusted Artifact Signer	-	`cpe:/a:redhat:trusted_artifact_signer:1`
Red Hat	Red Hat Trusted Artifact Signer	-	`cpe:/a:redhat:trusted_artifact_signer:1`
Red Hat	Red Hat Trusted Artifact Signer	-	`cpe:/a:redhat:trusted_artifact_signer:1`
Red Hat	Red Hat Trusted Artifact Signer	-	`cpe:/a:redhat:trusted_artifact_signer:1`
Red Hat	Red Hat Trusted Artifact Signer	-	`cpe:/a:redhat:trusted_artifact_signer:1`
Red Hat	Red Hat Trusted Profile Analyzer	-	`cpe:/a:redhat:trusted_profile_analyzer:1`

二、漏洞 CVE-2025-8556 的公开POC

#	POC 描述	源链接	神龙链接

AI 生成 POC高级

未找到公开 POC。

登录以生成 AI POC

三、漏洞 CVE-2025-8556 的情报信息

Please 登录 to view more intelligence information

https://github.com/cloudflare/circl
https://github.com/cloudflare/circl/security/advisories/GHSA-2x5j-vhc8-9cwm
https://github.com/cloudflare/circl/tree/v1.6.1
https://access.redhat.com/security/cve/CVE-2025-8556vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2371624issue-trackingx_refsource_REDHAT
https://nvd.nist.gov/vuln/detail/CVE-2025-8556

四、漏洞 CVE-2025-8556 的评论

暂无评论

支持本站 — 捐款将帮助我们持续运营

一、漏洞 CVE-2025-8556 基础信息

漏洞信息

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

受影响产品

二、漏洞 CVE-2025-8556 的公开POC

三、漏洞 CVE-2025-8556 的情报信息

四、漏洞 CVE-2025-8556 的评论

发表评论

支持本站 — 捐款将帮助我们持续运营

一、 漏洞 CVE-2025-8556 基础信息

漏洞信息

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

受影响产品

二、漏洞 CVE-2025-8556 的公开POC

三、漏洞 CVE-2025-8556 的情报信息

四、漏洞 CVE-2025-8556 的评论

发表评论

一、漏洞 CVE-2025-8556 基础信息