GHSA-q98x-73c3-57gj · 深刻度： high — Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap) processes attacker...
Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap) processes attacker-supplied CMS data, an attacker-chosen stream-mode KEK cipher can trigger a heap out-of-bounds read in kek_unwrap_key(). Impact summary: A heap buffer over-read may trigger a crash which leads to Denial of Service for an application if the input buffer ends at a memory page boundary and the following page is unmapped. There is no information disclosure as the over-read bytes are not revealed to the attacker. The key unwrapping function performs a check-byte test as specified in the RFC that reads 7 bytes from a heap allocation that is based on the wrapped key length from the message. There is a minimum length check based on the block length of the wrapping cipher. However the cipher is selected from an OID carried in the attacker's PWRI keyEncryptionAlgorithm with no requirement that the cipher be a block cipher. When an attacker selects a stream-mode cipher the guard will be ineffective and the allocated buffer containing the unwrapped key can be too small to fit the check-bytes specified in the RFC and a buffer over-read can happen. Applications calling CMS_decrypt() or CMS_decrypt_set1_password() (equivalently openssl cms -decrypt -pwri_password ...) on untrusted CMS data are vulnerable to this issue. No password knowledge is required: the over-read happens during the unwrap attempt before any authentication succeeds. The over-read is limited to a few bytes and is not written to output, so there is no information disclosure. Triggering a crash requires the allocation to border unmapped memory, which is unlikely with the normal allocator. The FIPS modules are not affected by this issue.
総合評価: CVE-2026-9076 は低リスク（37.4/100）。CVSS 深刻度は高。悪用される可能性が高い（EPSS 0.29%、21 パーセンタイル） 推奨対応: 悪用情報と EPSS の推移を監視し、必要に応じて優先度を見直してください。
リスクは変動します。再評価に基づき、本ページの表示内容を更新しています。
EPSS は日次で悪用されやすさの相対度合いを推定します。パーセンタイルは採点済み CVE の中での相対位置（高いほど相対的に深刻）を示します。
| # | 日付 | 旧 EPSS スコア | 新 EPSS スコア | Δ（新 − 旧） |
|---|---|---|---|---|
| 1 | 2026-06-15 | 0.10% | 0.29% | +0.20% |
| 2 | 2026-06-10 | — | 0.10% | — |
EPSS の全履歴 （全 2 件）
この CVE の CVSS 指標。
| ベーススコア | バージョン | 深刻度 | ベクトル | 悪用しやすさ | 影響 | スコアの出典 |
|---|---|---|---|---|---|---|
| 7.5 | 3.1 | HIGH |
|
3.9 | 3.6 | 134c704f-9b21-4f2e-91b3-4a467353bcc0 |
GHSA-q98x-73c3-57gj · 深刻度： high — Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap) processes attacker...
| vendor | priority | summary | link |
|---|---|---|---|
debian
|
not yet assigned | CVE-2026-9076 not yet assigned priority: Debian including 1 source packages (openssl), 5 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 5. | https://security-tracker.debian.org/tracker/CVE-2026-9076 |
redhat
|
low | — | https://access.redhat.com/security/cve/CVE-2026-9076 |
suse
|
medium | CVE-2026-9076 severity moderate: SUSE including 70 source package names (latest:libexpat1-2.7.1-4.1, latest:libopenssl3-3.1.4-slfo.1.1_10.1, …), 364 product×package rows across 68 product lines (Container suse/sl-micro/6.0/baremetal-os-container, Container suse/sl-micro/6.0/base-os-container, … (68 product lines)): First Fixed 240, Fixed 69, Known Not Affected 55. | https://www.suse.com/security/cve/CVE-2026-9076/ |
ubuntu
|
low | CVE-2026-9076 low priority: Ubuntu including 5 source packages (edk2, nodejs, openssl, openssl-fips, openssl1.0), 35 status rows across 9 suites (bionic, focal, jammy, noble, questing, resolute, trusty, upstream, xenial): needs-triage 12, released 9, DNE 8, not-affected 5, needed 1. | https://ubuntu.com/security/CVE-2026-9076 |
| ベンダー | 製品 | バージョン | 生の CPE |
|---|---|---|---|
| openssl | openssl | >= 1.0.2, < 1.0.2zq | cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:* |
| openssl | openssl | >= 1.1.1, < 1.1.1zh | cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:* |
| openssl | openssl | >= 3.0.0, < 3.0.21 | cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:* |
| openssl | openssl | >= 3.4.0, < 3.4.6 | cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:* |
| openssl | openssl | >= 3.5.0, < 3.5.7 | cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:* |
| openssl | openssl | >= 3.6.0, < 3.6.3 | cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:* |
| openssl | openssl | 4.0.0 | cpe:2.3:a:openssl:openssl:4.0.0:-:*:*:*:*:*:* |