CVE-2025-35471: conda-forge openssl-feedstock writable OPENSSLDIR
conda-forge openssl-feedstock before 066e83c (2024-05-20), on Microsoft Windows, configures OpenSSL to use an OPENSSLDIR file path that can be written to by non-privilged local users. By writing a specially crafted openssl.cnf file in OPENSSLDIR, a non-privileged local user can execute arbitrary code with the privileges of the user or process loading openssl-feedstock DLLs. Miniforge before 24.5.0 is also affected.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-35471?
CVE-2025-35471 is classified as a high-severity vulnerability due to the potential for non-privileged local users to gain unauthorized access.
How do I fix CVE-2025-35471?
To fix CVE-2025-35471, update the conda-forge openssl-feedstock to version 066e83c or later.
What systems are affected by CVE-2025-35471?
CVE-2025-35471 affects Microsoft Windows systems using the conda-forge openssl-feedstock prior to version 066e83c.
Can non-privileged users exploit CVE-2025-35471?
Yes, a non-privileged local user can exploit CVE-2025-35471 by writing a crafted openssl.cnf file in the OPENSSLDIR.
What is the risk associated with CVE-2025-35471?
The risk associated with CVE-2025-35471 includes the potential for arbitrary code execution by non-privileged users through the misconfigured OPENSSLDIR.