Skip to content
fr Sign in
3.7 Low

CVE-2025-8556 A flaw was found in CIRCL's implementation of the FourQ elliptic curve

Description

A flaw was found in CIRCL's implementation of the FourQ elliptic curve. This vulnerability allows an attacker to compromise session security via low-order point injection and incorrect point validation during Diffie-Hellman key exchange.

Affected products and versions

Product Affected versions Fixed in
Builds for Red Hat OpenShift Versions not published
Custom Metric Autoscaler operator for Red Hat Openshift Versions not published
Multicluster Global Hub Versions not published
OpenShift Pipelines Versions not published
OpenShift Serverless Versions not published
OpenShift Service Mesh 3 Versions not published
Red Hat Advanced Cluster Management for Kubernetes 2 Versions not published
Red Hat Advanced Cluster Security 4 Versions not published
Red Hat Ceph Storage 5 Versions not published
Show the 19 other branches
Product Affected versions Fixed in
Red Hat Ceph Storage 6 Versions not published
Red Hat Ceph Storage 8 Versions not published
Red Hat Developer Hub Versions not published
Red Hat Edge Manager preview Versions not published
Red Hat Enterprise Linux 10 Versions not published
Red Hat Enterprise Linux 9 Versions not published
Red Hat Enterprise Linux AI (RHEL AI) Versions not published
Red Hat OpenShift AI (RHOAI) Versions not published
Red Hat OpenShift Container Platform 4 Versions not published
Red Hat OpenShift Dev Workspaces Operator Versions not published
Red Hat OpenShift for Windows Containers Versions not published
Red Hat OpenShift GitOps Versions not published
Red Hat OpenShift Virtualization 4 Versions not published
Red Hat OpenStack Platform 16.2 Versions not published
Red Hat OpenStack Platform 17.1 Versions not published
Red Hat Trusted Application Pipeline Versions not published
Red Hat Trusted Artifact Signer Versions not published
Red Hat Trusted Profile Analyzer Versions not published
Red Hat Developer Hub 1 Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Builds for Red Hat OpenShift

The 17 CVEs of Builds for Red Hat OpenShift →
CVE-2026-10840 A flaw was found in the OpenShift Pipelines operator 7.1 High CVE-2026-27145 (*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name… 6.5 Medium CVE-2026-39821 The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label 9.6 Critical CVE-2026-42508 Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation 9.1 Critical
Track this CVE