CVE-2025-8556 Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results
A flaw was found in CIRCL's implementation of the FourQ elliptic curve. This vulnerability allows an attacker to compromise session security via low-order point injection and incorrect point validation during Diffie-Hellman key exchange.
Problem types: cwe_id: CWE-1287
description: Improper Validation of Specified Type of Input
Affected products: default_status: unaffected
vendor: Red Hat
product: Builds for Red Hat OpenShift
cpes: cpe:/a:redhat:openshift_builds:1
default_status: affected
vendor: Red Hat
product: Builds for Red Hat OpenShift
cpes: cpe:/a:redhat:openshift_builds:1
default_status: affected
vendor: Red Hat
product: Builds for Red Hat OpenShift
cpes: cpe:/a:redhat:openshift_builds:1
default_status: affected
vendor: Red Hat
product: Builds for Red Hat OpenShift
cpes: cpe:/a:redhat:openshift_builds:1
default_status: affected
vendor: Red Hat
product: Builds for Red Hat OpenShift
cpes: cpe:/a:redhat:openshift_builds:1
default_status: affected
vendor: Red Hat
product: Builds for Red Hat OpenShift
cpes: cpe:/a:redhat:openshift_builds:1
default_status: affected
vendor: Red Hat
product: Custom Metric Autoscaler operator for Red Hat Openshift
cpes: cpe:/a:redhat:openshift_custom_metrics_autoscaler:2
default_status: affected
vendor: Red Hat
product: Custom Metric Autoscaler operator for Red Hat Openshift
cpes: cpe:/a:redhat:openshift_custom_metrics_autoscaler:2
default_status: affected
vendor: Red Hat
product: Custom Metric Autoscaler operator for Red Hat Openshift
cpes: cpe:/a:redhat:openshift_custom_metrics_autoscaler:2
default_status: affected
vendor: Red Hat
product: Custom Metric Autoscaler operator for Red Hat Openshift
cpes: cpe:/a:redhat:openshift_custom_metrics_autoscaler:2
default_status: affected
vendor: Red Hat
product: Custom Metric Autoscaler operator for Red Hat Openshift
cpes: cpe:/a:redhat:openshift_custom_metrics_autoscaler:2
default_status: affected
vendor: Red Hat
product: Multicluster Global Hub
cpes: cpe:/a:redhat:multicluster_globalhub
default_status: affected
vendor: Red Hat
product: OpenShift Pipelines
cpes: cpe:/a:redhat:openshift_pipelines:1
default_status: affected
vendor: Red Hat
product: OpenShift Pipelines
cpes: cpe:/a:redhat:openshift_pipelines:1
default_status: affected
vendor: Red Hat
product: OpenShift Pipelines
cpes: cpe:/a:redhat:openshift_pipelines:1
default_status: affected
vendor: Red Hat
product: OpenShift Pipelines
cpes: cpe:/a:redhat:openshift_pipelines:1
default_status: affected
vendor: Red Hat
product: OpenShift Pipelines
cpes: cpe:/a:redhat:openshift_pipelines:1
default_status: affected
vendor: Red Hat
product: OpenShift Pipelines
cpes: cpe:/a:redhat:openshift_pipelines:1
default_status: affected
vendor: Red Hat
product: OpenShift Pipelines
cpes: cpe:/a:redhat:openshift_pipelines:1
default_status: affected
vendor: Red Hat
product: OpenShift Pipelines
cpes: cpe:/a:redhat:openshift_pipelines:1
default_status: affected
vendor: Red Hat
product: OpenShift Pipelines
cpes: cpe:/a:redhat:openshift_pipelines:1
default_status: affected
vendor: Red Hat
product: OpenShift Pipelines
cpes: cpe:/a:redhat:openshift_pipelines:1
default_status: affected
vendor: Red Hat
product: OpenShift Pipelines
cpes: cpe:/a:redhat:openshift_pipelines:1
default_status: affected
vendor: Red Hat
product: OpenShift Pipelines
cpes: cpe:/a:redhat:openshift_pipelines:1
default_status: affected
vendor: Red Hat
product: OpenShift Pipelines
cpes: cpe:/a:redhat:openshift_pipelines:1
default_status: affected
vendor: Red Hat
product: OpenShift Pipelines
cpes: cpe:/a:redhat:openshift_pipelines:1
default_status: affected
vendor: Red Hat
product: OpenShift Pipelines
cpes: cpe:/a:redhat:openshift_pipelines:1
default_status: affected
vendor: Red Hat
product: OpenShift Pipelines
cpes: cpe:/a:redhat:openshift_pipelines:1
default_status: affected
vendor: Red Hat
product: OpenShift Pipelines
cpes: cpe:/a:redhat:openshift_pipelines:1
default_status: affected
vendor: Red Hat
product: OpenShift Pipelines
cpes: cpe:/a:redhat:openshift_pipelines:1
default_status: affected
vendor: Red Hat
product: OpenShift Pipelines
cpes: cpe:/a:redhat:openshift_pipelines:1
default_status: affected
vendor: Red Hat
product: OpenShift Pipelines
cpes: cpe:/a:redhat:openshift_pipelines:1
default_status: affected
vendor: Red Hat
product: OpenShift Pipelines
cpes: cpe:/a:redhat:openshift_pipelines:1
default_status: affected
vendor: Red Hat
product: OpenShift Pipelines
cpes: cpe:/a:redhat:openshift_pipelines:1
default_status: affected
vendor: Red Hat
product: OpenShift Pipelines
cpes: cpe:/a:redhat:openshift_pipelines:1
default_status: affected
vendor: Red Hat
product: OpenShift Pipelines
cpes: cpe:/a:redhat:openshift_pipelines:1
default_status: affected
vendor: Red Hat
product: OpenShift Pipelines
cpes: cpe:/a:redhat:openshift_pipelines:1
default_status: affected
vendor: Red Hat
product: OpenShift Pipelines
cpes: cpe:/a:redhat:openshift_pipelines:1
default_status: affected
vendor: Red Hat
product: OpenShift Pipelines
cpes: cpe:/a:redhat:openshift_pipelines:1
default_status: affected
vendor: Red Hat
product: OpenShift Serverless
cpes: cpe:/a:redhat:serverless:1
default_status: affected
vendor: Red Hat
product: OpenShift Serverless
cpes: cpe:/a:redhat:serverless:1
default_status: affected
vendor: Red Hat
product: OpenShift Serverless
cpes: cpe:/a:redhat:serverless:1
default_status: affected
vendor: Red Hat
product: OpenShift Serverless
cpes: cpe:/a:redhat:serverless:1
default_status: affected
vendor: Red Hat
product: OpenShift Service Mesh 3
cpes: cpe:/a:redhat:service_mesh:3
default_status: affected
vendor: Red Hat
product: OpenShift Service Mesh 3
cpes: cpe:/a:redhat:service_mesh:3
default_status: affected
vendor: Red Hat
product: OpenShift Service Mesh 3
cpes: cpe:/a:redhat:service_mesh:3
default_status: affected
vendor: Red Hat
product: OpenShift Service Mesh 3
cpes: cpe:/a:redhat:service_mesh:3
default_status: affected
vendor: Red Hat
product: OpenShift Service Mesh 3
cpes: cpe:/a:redhat:service_mesh:3
default_status: affected
vendor: Red Hat
product: OpenShift Service Mesh 3
cpes: cpe:/a:redhat:service_mesh:3
default_status: affected
vendor: Red Hat
product: OpenShift Service Mesh 3
cpes: cpe:/a:redhat:service_mesh:3
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2
cpes: cpe:/a:redhat:acm:2
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2
cpes: cpe:/a:redhat:acm:2
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2
cpes: cpe:/a:redhat:acm:2
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2
cpes: cpe:/a:redhat:acm:2
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2
cpes: cpe:/a:redhat:acm:2
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2
cpes: cpe:/a:redhat:acm:2
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2
cpes: cpe:/a:redhat:acm:2
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Management for Kubernetes 2
cpes: cpe:/a:redhat:acm:2
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Security 4
cpes: cpe:/a:redhat:advanced_cluster_security:4
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Security 4
cpes: cpe:/a:redhat:advanced_cluster_security:4
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Security 4
cpes: cpe:/a:redhat:advanced_cluster_security:4
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Security 4
cpes: cpe:/a:redhat:advanced_cluster_security:4
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Security 4
cpes: cpe:/a:redhat:advanced_cluster_security:4
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Security 4
cpes: cpe:/a:redhat:advanced_cluster_security:4
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Security 4
cpes: cpe:/a:redhat:advanced_cluster_security:4
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Security 4
cpes: cpe:/a:redhat:advanced_cluster_security:4
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Security 4
cpes: cpe:/a:redhat:advanced_cluster_security:4
default_status: affected
vendor: Red Hat
product: Red Hat Advanced Cluster Security 4
cpes: cpe:/a:redhat:advanced_cluster_security:4
default_status: affected
vendor: Red Hat
product: Red Hat Ceph Storage 5
cpes: cpe:/a:redhat:ceph_storage:5
default_status: affected
vendor: Red Hat
product: Red Hat Ceph Storage 5
cpes: cpe:/a:redhat:ceph_storage:5
default_status: affected
vendor: Red Hat
product: Red Hat Ceph Storage 6
cpes: cpe:/a:redhat:ceph_storage:6
default_status: affected
vendor: Red Hat
product: Red Hat Ceph Storage 6
cpes: cpe:/a:redhat:ceph_storage:6
default_status: affected
vendor: Red Hat
product: Red Hat Ceph Storage 8
cpes: cpe:/a:redhat:ceph_storage:8
default_status: affected
vendor: Red Hat
product: Red Hat Ceph Storage 8
cpes: cpe:/a:redhat:ceph_storage:8
default_status: affected
vendor: Red Hat
product: Red Hat Developer Hub
cpes: cpe:/a:redhat:rhdh:1
default_status: affected
vendor: Red Hat
product: Red Hat Developer Hub
cpes: cpe:/a:redhat:rhdh:1
default_status: affected
vendor: Red Hat
product: Red Hat Edge Manager preview
cpes: cpe:/a:redhat:edge_manager:0
default_status: affected
vendor: Red Hat
product: Red Hat Edge Manager preview
cpes: cpe:/a:redhat:edge_manager:0
default_status: affected
vendor: Red Hat
product: Red Hat Edge Manager preview
cpes: cpe:/a:redhat:edge_manager:0
default_status: affected
vendor: Red Hat
product: Red Hat Edge Manager preview
cpes: cpe:/a:redhat:edge_manager:0
default_status: affected
vendor: Red Hat
product: Red Hat Edge Manager preview
cpes: cpe:/a:redhat:edge_manager:0
default_status: affected
vendor: Red Hat
product: Red Hat Edge Manager preview
cpes: cpe:/a:redhat:edge_manager:0
default_status: affected
vendor: Red Hat
product: Red Hat Edge Manager preview
cpes: cpe:/a:redhat:edge_manager:0
default_status: affected
vendor: Red Hat
product: Red Hat Edge Manager preview
cpes: cpe:/a:redhat:edge_manager:0
default_status: affected
vendor: Red Hat
product: Red Hat Edge Manager preview
cpes: cpe:/a:redhat:edge_manager:0
default_status: affected
vendor: Red Hat
product: Red Hat Edge Manager preview
cpes: cpe:/a:redhat:edge_manager:0
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 10
cpes: cpe:/o:redhat:enterprise_linux:10
default_status: unaffected
vendor: Red Hat
product: Red Hat Enterprise Linux 9
cpes: cpe:/o:redhat:enterprise_linux:9
default_status: unaffected
vendor: Red Hat
product: Red Hat Enterprise Linux AI (RHEL AI)
cpes: cpe:/a:redhat:enterprise_linux_ai:1
default_status: unaffected
vendor: Red Hat
product: Red Hat Enterprise Linux AI (RHEL AI)
cpes: cpe:/a:redhat:enterprise_linux_ai:1
default_status: unaffected
vendor: Red Hat
product: Red Hat Enterprise Linux AI (RHEL AI)
cpes: cpe:/a:redhat:enterprise_linux_ai:1
default_status: unaffected
vendor: Red Hat
product: Red Hat Enterprise Linux AI (RHEL AI)
cpes: cpe:/a:redhat:enterprise_linux_ai:1
default_status: unaffected
vendor: Red Hat
product: Red Hat Enterprise Linux AI (RHEL AI)
cpes: cpe:/a:redhat:enterprise_linux_ai:1
default_status: unaffected
vendor: Red Hat
product: Red Hat Enterprise Linux AI (RHEL AI)
cpes: cpe:/a:redhat:enterprise_linux_ai:1
default_status: unaffected
vendor: Red Hat
product: Red Hat Enterprise Linux AI (RHEL AI)
cpes: cpe:/a:redhat:enterprise_linux_ai:1
default_status: unaffected
vendor: Red Hat
product: Red Hat Enterprise Linux AI (RHEL AI)
cpes: cpe:/a:redhat:enterprise_linux_ai:1
default_status: unaffected
vendor: Red Hat
product: Red Hat Enterprise Linux AI (RHEL AI)
cpes: cpe:/a:redhat:enterprise_linux_ai:1
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux AI (RHEL AI)
cpes: cpe:/a:redhat:enterprise_linux_ai:1
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift AI (RHOAI)
cpes: cpe:/a:redhat:openshift_ai
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift AI (RHOAI)
cpes: cpe:/a:redhat:openshift_ai
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4
cpes: cpe:/a:redhat:openshift:4
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4
cpes: cpe:/a:redhat:openshift:4
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4
cpes: cpe:/a:redhat:openshift:4
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4
cpes: cpe:/a:redhat:openshift:4
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4
cpes: cpe:/a:redhat:openshift:4
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4
cpes: cpe:/a:redhat:openshift:4
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4
cpes: cpe:/a:redhat:openshift:4
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4
cpes: cpe:/a:redhat:openshift:4
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4
cpes: cpe:/a:redhat:openshift:4
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4
cpes: cpe:/a:redhat:openshift:4
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4
cpes: cpe:/a:redhat:openshift:4
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift Dev Workspaces Operator
cpes: cpe:/a:redhat:devworkspace
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift Dev Workspaces Operator
cpes: cpe:/a:redhat:devworkspace
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift Dev Workspaces Operator
cpes: cpe:/a:redhat:devworkspace
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift for Windows Containers
cpes: cpe:/a:redhat:windows_machine_config
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift for Windows Containers
cpes: cpe:/a:redhat:windows_machine_config
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift GitOps
cpes: cpe:/a:redhat:openshift_gitops:1
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift GitOps
cpes: cpe:/a:redhat:openshift_gitops:1
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift GitOps
cpes: cpe:/a:redhat:openshift_gitops:1
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift GitOps
cpes: cpe:/a:redhat:openshift_gitops:1
default_status: affected
vendor: Red Hat
product: Red Hat OpenShift Virtualization 4
cpes: cpe:/a:redhat:container_native_virtualization:4
default_status: affected
vendor: Red Hat
product: Red Hat OpenStack Platform 16.2
cpes: cpe:/a:redhat:openstack:16.2
default_status: unknown
vendor: Red Hat
product: Red Hat OpenStack Platform 16.2
cpes: cpe:/a:redhat:openstack:16.2
default_status: unknown
vendor: Red Hat
product: Red Hat OpenStack Platform 16.2
cpes: cpe:/a:redhat:openstack:16.2
default_status: unknown
vendor: Red Hat
product: Red Hat OpenStack Platform 17.1
cpes: cpe:/a:redhat:openstack:17.1
default_status: unknown
vendor: Red Hat
product: Red Hat OpenStack Platform 17.1
cpes: cpe:/a:redhat:openstack:17.1
default_status: unknown
vendor: Red Hat
product: Red Hat OpenStack Platform 17.1
cpes: cpe:/a:redhat:openstack:17.1
default_status: unknown
vendor: Red Hat
product: Red Hat Trusted Application Pipeline
cpes: cpe:/a:redhat:trusted_application_pipeline:1
default_status: affected
vendor: Red Hat
product: Red Hat Trusted Artifact Signer
cpes: cpe:/a:redhat:trusted_artifact_signer:1
default_status: affected
vendor: Red Hat
product: Red Hat Trusted Artifact Signer
cpes: cpe:/a:redhat:trusted_artifact_signer:1
default_status: affected
vendor: Red Hat
product: Red Hat Trusted Artifact Signer
cpes: cpe:/a:redhat:trusted_artifact_signer:1
default_status: affected
vendor: Red Hat
product: Red Hat Trusted Artifact Signer
cpes: cpe:/a:redhat:trusted_artifact_signer:1
default_status: affected
vendor: Red Hat
product: Red Hat Trusted Artifact Signer
cpes: cpe:/a:redhat:trusted_artifact_signer:1
default_status: affected
vendor: Red Hat
product: Red Hat Trusted Artifact Signer
cpes: cpe:/a:redhat:trusted_artifact_signer:1
default_status: affected
vendor: Red Hat
product: Red Hat Trusted Artifact Signer
cpes: cpe:/a:redhat:trusted_artifact_signer:1
default_status: affected
vendor: Red Hat
product: Red Hat Trusted Artifact Signer
cpes: cpe:/a:redhat:trusted_artifact_signer:1
default_status: affected
vendor: Red Hat
product: Red Hat Trusted Profile Analyzer
cpes: cpe:/a:redhat:trusted_profile_analyzer:1
default_status: affected
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 3.7
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Published: 2025-08-06T08:48:17.946Z