Cryptographic issues in Crypt Sodium XS - CVE-2025-15444

Vulnerability identifier: #VU120977

CSH Severity: Medium

CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N]

CVE-ID: CVE-2025-15444

CWE-ID: CWE-310

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to read and manipulate data.

The vulnerability exists due to usage of a vulnerable version of libsodium described as #VU120975 (CVE-2025-69277). A remote attacker can read or manipulate encrypted data.

Crypt Sodium XS
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Micro for Rancher
SUSE Linux Enterprise Micro
SUSE Linux Micro
Public Cloud Module
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
Basesystem Module
openSUSE Leap
Anolis OS
libsodium23
libsodium
libsodium-devel
libsodium-static
libsodium-doc
libsodium23-debuginfo
libsodium-debugsource
libsodium23-32bit
libsodium23-32bit-debuginfo
libsodium26-debuginfo
libsodium26

Install updates from vendor's website.

Crypt Sodium XS - update to 0.000042
libsodium23 - addressed in versions 1.0.16-1.12.1, 1.0.16-1.15.1, 1.0.18-150000.4.14.1
libsodium - update to 1.0.18-3
libsodium-devel - update to 1.0.18-3
libsodium-static - update to 1.0.18-3
libsodium-doc - update to 1.0.18-3
libsodium23-debuginfo - update to 1.0.18-150000.4.14.1
libsodium-devel - update to 1.0.18-150000.4.14.1
libsodium-debugsource - addressed in versions 1.0.18-150000.4.14.1, 1.0.21-160000.1.1
libsodium23-32bit - update to 1.0.18-150000.4.14.1
libsodium23-32bit-debuginfo - update to 1.0.18-150000.4.14.1
libsodium26-debuginfo - update to 1.0.21-160000.1.1
libsodium26 - update to 1.0.21-160000.1.1

• https://00f.net/2025/12/30/libsodium-vulnerability/
• https://github.com/jedisct1/libsodium/commit/ad3004ec8731730e93fcfbbc824e67eadc1c1bae
• https://metacpan.org/dist/Crypt-Sodium-XS/changes

• Perl Crypt::Sodium::XS module update for libsodium
• SUSE update for libsodium
• Anolis OS update for libsodium
• SUSE update for libsodium
• SUSE update for libsodium
• SUSE update for libsodium