CVE-2025-27587

Name of the Vulnerable Software and Affected Versions openssl-3 (affected versions not specified)

Description The issue concerns a timing side channel vulnerability in the P-384 implementation when used with ECDSA in the PPC architecture. Additionally, there is a missing null pointer check before accessing handshake func in ssl lib.c. This could potentially lead to security issues. There is also an issue with Disabling EMS in OpenSSL configuration, which prevents sshd from starting.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.