SERVER-OTHER OpenSSL CMS AuthEnvelopedData buffer overflow attempt

IPS-NPA

2 SIDs: 66017, 66018

Description

Detects an attempt to exploit CVE-2025-15467, a memory corruption flaw that can allow code execution or disclosure in OpenSSL CMS AuthEnvelopedData.

CVEs

Related blogs

New Evasive Campaign Delivers LegionLoader via Fake CAPTCHA & CloudFlare Turnstile

New Evasive Campaign Delivers LegionLoader via Fake CAPTCHA & CloudFlare Turnstile

April 4, 20258 min read

Multi-Factor Authentication (MFA) Bypass Through Man-in-the-Middle Phishing Attacks

Multi-Factor Authentication (MFA) Bypass Through Man-in-the-Middle Phishing Attacks

April 14, 20224 min read

DROWN Vulnerability Remains High

DROWN Vulnerability Remains High

March 8, 20163 min read

Logjam Attack — Day 2 Findings and Recommendations

Logjam Attack — Day 2 Findings and Recommendations

May 21, 20152 min read

Poodle Attack: 1,632 Cloud Apps Vulnerable

Poodle Attack: 1,632 Cloud Apps Vulnerable

October 15, 20142 min read

OpenSSL CCS Injection Vulnerability Countdown

OpenSSL CCS Injection Vulnerability Countdown

June 16, 20142 min read

OpenSSL ChangeCipherSpec Injection Vulnerability (CVE-2014-0224)

OpenSSL ChangeCipherSpec Injection Vulnerability (CVE-2014-0224)

June 6, 20143 min read

Heartbleed Remediation Status for Enterprise Cloud Apps

Heartbleed Remediation Status for Enterprise Cloud Apps

May 1, 20143 min read

References

openssl-library.org