VDB

RHSA-2025%3A4005

RHSA-2025%3A4005 PUBLISHED CVSS 7.400000095367432 HIGH

A flaw was found in OpenSSL's RFC7250 Raw Public Key (RPK) authentication. This vulnerability allows man-in-the-middle (MITM) attacks via failure to abort TLS/DTLS handshakes when the server's RPK does not match the expected key despite the SSL_VERIFY_PEER verification mode being set.

Risk Scores

CVSS 3.1
7.400000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected Products

VendorProductVersions
Red Hatservice-interconnect/skupper-controller-podman-rhel9@sha256:7a65a26dc61968eca4ea300b41ab42ae1cae91b03cb3bbc1b21b9a33d9b80a0c_amd64 as a component of Red Hat Service Interconnect 1*
Red Hatservice-interconnect/skupper-flow-collector-rhel9@sha256:8172dcc2d84f8d6c8f347f2d86158d891c9483ffd97715bb085a1dc25c6fdcb1_amd64 as a component of Red Hat Service Interconnect 1service-interconnect/skupper-flow-collector-rhel9@sha256:8172dcc2d84f8d6c8f347f2d86158d891c9483ffd97715bb085a1dc25c6fdcb1_amd64
Red Hatservice-interconnect/skupper-site-controller-rhel9@sha256:f93998f77e2b7f813655aa523caaaf4504f63766a2f8289132c1b8500a723520_s390x as a component of Red Hat Service Interconnect 1service-interconnect/skupper-site-controller-rhel9@sha256:f93998f77e2b7f813655aa523caaaf4504f63766a2f8289132c1b8500a723520_s390x
Red Hatservice-interconnect/skupper-config-sync-rhel9@sha256:a91959f9373e633bdf1973d047c1472ee1b6ae6dfa67d14a4731e3a52fbcf6cb_ppc64le as a component of Red Hat Service Interconnect 1service-interconnect/skupper-config-sync-rhel9@sha256:a91959f9373e633bdf1973d047c1472ee1b6ae6dfa67d14a4731e3a52fbcf6cb_ppc64le
Red Hatservice-interconnect/skupper-controller-podman-container-rhel9@sha256:7a65a26dc61968eca4ea300b41ab42ae1cae91b03cb3bbc1b21b9a33d9b80a0c_amd64 as a component of Red Hat Service Interconnect 1service-interconnect/skupper-controller-podman-container-rhel9@sha256:7a65a26dc61968eca4ea300b41ab42ae1cae91b03cb3bbc1b21b9a33d9b80a0c_amd64
Red Hatservice-interconnect/skupper-controller-podman-rhel9@sha256:700a8bb8682312fd9ad6cd8e0a7fafd8367f231a8222d87f356141a22dceb43e_arm64 as a component of Red Hat Service Interconnect 1*
Red Hatservice-interconnect/skupper-router-rhel9@sha256:c75fe0bf54e0528872626344d4437cbf4da95415b2a72fb9eb74f4c805af9f34_arm64 as a component of Red Hat Service Interconnect 1service-interconnect/skupper-router-rhel9@sha256:c75fe0bf54e0528872626344d4437cbf4da95415b2a72fb9eb74f4c805af9f34_arm64
Red Hatservice-interconnect/skupper-operator-bundle@sha256:bfd1ed30aaa0296102c8b04512c2356118938ff335d01e91e31ed0dff7607e9b_arm64 as a component of Red Hat Service Interconnect 1service-interconnect/skupper-operator-bundle@sha256:bfd1ed30aaa0296102c8b04512c2356118938ff335d01e91e31ed0dff7607e9b_arm64
Red Hatservice-interconnect/skupper-service-controller-rhel9@sha256:367add17713f74c7c1dddda8b4432ba1cdf0fe4580a93c0b130f44a889ab451d_s390x as a component of Red Hat Service Interconnect 1*
Red Hatservice-interconnect/skupper-controller-podman-container-rhel9@sha256:2495b9140d01e6954da03935e3ed2b708a9e2cfa92812224218b6abf2eeff498_ppc64le as a component of Red Hat Service Interconnect 1service-interconnect/skupper-controller-podman-container-rhel9@sha256:2495b9140d01e6954da03935e3ed2b708a9e2cfa92812224218b6abf2eeff498_ppc64le
Red Hatservice-interconnect/skupper-site-controller-rhel9@sha256:624c1c8d91847d6701bd3c67374bbe9f8da6968fc7d00237d56b811eb5fe2a8a_ppc64le as a component of Red Hat Service Interconnect 1service-interconnect/skupper-site-controller-rhel9@sha256:624c1c8d91847d6701bd3c67374bbe9f8da6968fc7d00237d56b811eb5fe2a8a_ppc64le
Red Hatservice-interconnect/skupper-site-controller-rhel9@sha256:ee56d1581145bee854ec9f47e0738e01e1c6eb8bf32b87d42c3fe69808aebc1a_amd64 as a component of Red Hat Service Interconnect 1service-interconnect/skupper-site-controller-rhel9@sha256:ee56d1581145bee854ec9f47e0738e01e1c6eb8bf32b87d42c3fe69808aebc1a_amd64
Red Hatservice-interconnect/skupper-config-sync-rhel9@sha256:d7d209693ac31133ab96bbe989bc363228e183c9a44be3fddfd6cf0a72701752_arm64 as a component of Red Hat Service Interconnect 1service-interconnect/skupper-config-sync-rhel9@sha256:d7d209693ac31133ab96bbe989bc363228e183c9a44be3fddfd6cf0a72701752_arm64
Red Hatservice-interconnect/skupper-flow-collector-rhel9@sha256:b78b52b9c290f57ee2d43b37d0253e19707f5a0ef7d010b1c5ee762c0d49ee0c_arm64 as a component of Red Hat Service Interconnect 1service-interconnect/skupper-flow-collector-rhel9@sha256:b78b52b9c290f57ee2d43b37d0253e19707f5a0ef7d010b1c5ee762c0d49ee0c_arm64
Red Hatservice-interconnect/skupper-controller-podman-container-rhel9@sha256:700a8bb8682312fd9ad6cd8e0a7fafd8367f231a8222d87f356141a22dceb43e_arm64 as a component of Red Hat Service Interconnect 1*
Red Hatservice-interconnect/skupper-service-controller-rhel9@sha256:24c3150556113670688afc6ce7595e818829741f80d59302ff08c9f71bb8f6fb_amd64 as a component of Red Hat Service Interconnect 1*
Red Hatservice-interconnect/skupper-router-rhel9@sha256:7220e7dc2c3c44f094c6bd9f7053ba4729d076868ffdec5a0bba2443cf43e540_amd64 as a component of Red Hat Service Interconnect 1service-interconnect/skupper-router-rhel9@sha256:7220e7dc2c3c44f094c6bd9f7053ba4729d076868ffdec5a0bba2443cf43e540_amd64
Red Hatservice-interconnect/skupper-flow-collector-rhel9@sha256:1d7610a260bca96e6672bb4ee0c3902ef638dd687ad4585c352f1421306a4194_ppc64le as a component of Red Hat Service Interconnect 1service-interconnect/skupper-flow-collector-rhel9@sha256:1d7610a260bca96e6672bb4ee0c3902ef638dd687ad4585c352f1421306a4194_ppc64le
Red Hatservice-interconnect/skupper-flow-collector-rhel9@sha256:de06b15c6049c92834629fc58a5753344d53daa669b424c65bf5d0092c8224be_s390x as a component of Red Hat Service Interconnect 1service-interconnect/skupper-flow-collector-rhel9@sha256:de06b15c6049c92834629fc58a5753344d53daa669b424c65bf5d0092c8224be_s390x
Red Hatservice-interconnect/skupper-config-sync-rhel9@sha256:b0ada4fa5af4694c2f5dc4093847d99bf282f2182d78ef1947011cf0fa64c819_amd64 as a component of Red Hat Service Interconnect 1service-interconnect/skupper-config-sync-rhel9@sha256:b0ada4fa5af4694c2f5dc4093847d99bf282f2182d78ef1947011cf0fa64c819_amd64

…and 10 more

Timeline

  • Apr 17, 2025 CVE Published
  • Apr 24, 2026 CVE Updated
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory

References

…and 1 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›