Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results
Impact
A flaw was found in CIRCL's implementation of the FourQ elliptic curve. This vulnerability allows an attacker to compromise session security via low-order point injection and incorrect point validation during Diffie-Hellman key exchange.
Source excerpt · redhatWhat to do
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Affected packages
Affected products
Vendor version evidence. Product records are separate from automatic dependency matching.
·
Other versions: unaffected
| Version / range | Source status |
|---|---|
| 0 to before 1.6.1 | affected |
Red Hat · Builds for Red Hat OpenShift
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Builds for Red Hat OpenShift
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Builds for Red Hat OpenShift
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Builds for Red Hat OpenShift
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Builds for Red Hat OpenShift
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Builds for Red Hat OpenShift
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Custom Metric Autoscaler operator for Red Hat Openshift
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Custom Metric Autoscaler operator for Red Hat Openshift
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Custom Metric Autoscaler operator for Red Hat Openshift
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Custom Metric Autoscaler operator for Red Hat Openshift
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Custom Metric Autoscaler operator for Red Hat Openshift
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Multicluster Global Hub
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Pipelines
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Pipelines
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Pipelines
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Pipelines
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Pipelines
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Pipelines
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Pipelines
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Pipelines
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Pipelines
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Pipelines
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Pipelines
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Pipelines
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Pipelines
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Pipelines
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Pipelines
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Pipelines
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Pipelines
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Pipelines
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Pipelines
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Pipelines
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Pipelines
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Pipelines
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Pipelines
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Pipelines
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Pipelines
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Pipelines
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Pipelines
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Serverless
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Serverless
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Serverless
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Serverless
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Service Mesh 3
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Service Mesh 3
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Service Mesh 3
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Service Mesh 3
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Service Mesh 3
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Service Mesh 3
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · OpenShift Service Mesh 3
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Advanced Cluster Security 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Advanced Cluster Security 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Advanced Cluster Security 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Advanced Cluster Security 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Advanced Cluster Security 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Advanced Cluster Security 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Advanced Cluster Security 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Advanced Cluster Security 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Advanced Cluster Security 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Advanced Cluster Security 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Ceph Storage 5
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Ceph Storage 5
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Ceph Storage 6
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Ceph Storage 6
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Ceph Storage 8
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Ceph Storage 8
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Developer Hub 1
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Developer Hub 1
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Edge Manager preview
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Edge Manager preview
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Edge Manager preview
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Edge Manager preview
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Edge Manager preview
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Edge Manager preview
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Edge Manager preview
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Edge Manager preview
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Edge Manager preview
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Edge Manager preview
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Enterprise Linux 10
Other versions: unaffected
| Version / range | Source status |
|---|
Red Hat · Red Hat Enterprise Linux 9
Other versions: unaffected
| Version / range | Source status |
|---|
Red Hat · Red Hat Enterprise Linux AI (RHEL AI)
Other versions: unaffected
| Version / range | Source status |
|---|
Red Hat · Red Hat Enterprise Linux AI (RHEL AI)
Other versions: unaffected
| Version / range | Source status |
|---|
Red Hat · Red Hat Enterprise Linux AI (RHEL AI)
Other versions: unaffected
| Version / range | Source status |
|---|
Red Hat · Red Hat Enterprise Linux AI (RHEL AI)
Other versions: unaffected
| Version / range | Source status |
|---|
Red Hat · Red Hat Enterprise Linux AI (RHEL AI)
Other versions: unaffected
| Version / range | Source status |
|---|
Red Hat · Red Hat Enterprise Linux AI (RHEL AI)
Other versions: unaffected
| Version / range | Source status |
|---|
Red Hat · Red Hat Enterprise Linux AI (RHEL AI)
Other versions: unaffected
| Version / range | Source status |
|---|
Red Hat · Red Hat Enterprise Linux AI (RHEL AI)
Other versions: unaffected
| Version / range | Source status |
|---|
Red Hat · Red Hat Enterprise Linux AI (RHEL AI)
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Enterprise Linux AI (RHEL AI)
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift AI (RHOAI)
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift AI (RHOAI)
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Container Platform 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Dev Workspaces Operator
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Dev Workspaces Operator
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Dev Workspaces Operator
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift for Windows Containers
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift for Windows Containers
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift GitOps
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift GitOps
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift GitOps
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift GitOps
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenShift Virtualization 4
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenStack Platform 16.2
Other versions: unknown
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenStack Platform 16.2
Other versions: unknown
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenStack Platform 16.2
Other versions: unknown
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenStack Platform 17.1
Other versions: unknown
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenStack Platform 17.1
Other versions: unknown
| Version / range | Source status |
|---|
Red Hat · Red Hat OpenStack Platform 17.1
Other versions: unknown
| Version / range | Source status |
|---|
Red Hat · Red Hat Trusted Application Pipeline
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Trusted Artifact Signer
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Trusted Artifact Signer
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Trusted Artifact Signer
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Trusted Artifact Signer
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Trusted Artifact Signer
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Trusted Artifact Signer
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Trusted Artifact Signer
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Trusted Artifact Signer
Other versions: affected
| Version / range | Source status |
|---|
Red Hat · Red Hat Trusted Profile Analyzer
Other versions: affected
| Version / range | Source status |
|---|
Original source description
A flaw was found in CIRCL's implementation of the FourQ elliptic curve. This vulnerability allows an attacker to compromise session security via low-order point injection and incorrect point validation during Diffie-Hellman key exchange.
References
- Security advisory access.redhat.com/security/cve/CVE-2025-8556
- Source reference bugzilla.redhat.com/show_bug.cgi
- Source reference github.com/cloudflare/circl
- Security advisory github.com/cloudflare/circl/security/advisories/GHSA-2x5j-vhc8-9cwm
- Source reference github.com/cloudflare/circl/tree/v1.6.1