CVE-2025-3416

A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.

References

Affected packages

Debian:11 / rust-openssl

Package

Name: rust-openssl
Purl: pkg:deb/debian/rust-openssl?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.10.29-1

0.10.29-1+deb11u1

0.10.36-1

0.10.41-1

0.10.45-1

0.10.57-1

0.10.64-1

0.10.68-1

0.10.70-1

0.10.72-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / rust-openssl

Package

Name: rust-openssl
Purl: pkg:deb/debian/rust-openssl?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.10.45-1

0.10.57-1

0.10.64-1

0.10.68-1

0.10.70-1

0.10.72-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / rust-openssl

Package

Name: rust-openssl
Purl: pkg:deb/debian/rust-openssl?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.10.72-1

Affected versions

0.*

0.10.45-1

0.10.57-1

0.10.64-1

0.10.68-1

0.10.70-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/sfackler/rust-openssl

Affected ranges

Type: GIT
Repo: https://github.com/sfackler/rust-openssl
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

87085bd67896b7f92e6de35d081f607a334beae4

Affected versions

openssl-errors-v0.*

openssl-errors-v0.1.0

openssl-errors-v0.2.0

openssl-macros-v0.*

openssl-macros-v0.1.0

openssl-macros-v0.1.1

openssl-sys-v0.*

openssl-sys-v0.7.15

openssl-sys-v0.7.16

openssl-sys-v0.7.17

openssl-sys-v0.9.100

openssl-sys-v0.9.101

openssl-sys-v0.9.102

openssl-sys-v0.9.103

openssl-sys-v0.9.104

openssl-sys-v0.9.105

openssl-sys-v0.9.106

openssl-sys-v0.9.24

openssl-sys-v0.9.25

openssl-sys-v0.9.26

openssl-sys-v0.9.27

openssl-sys-v0.9.28

openssl-sys-v0.9.30

openssl-sys-v0.9.31

openssl-sys-v0.9.32

openssl-sys-v0.9.33

openssl-sys-v0.9.35

openssl-sys-v0.9.36

openssl-sys-v0.9.37

openssl-sys-v0.9.38

openssl-sys-v0.9.39

openssl-sys-v0.9.40

openssl-sys-v0.9.41

openssl-sys-v0.9.42

openssl-sys-v0.9.43

openssl-sys-v0.9.44

openssl-sys-v0.9.45

openssl-sys-v0.9.46

openssl-sys-v0.9.47

openssl-sys-v0.9.48

openssl-sys-v0.9.49

openssl-sys-v0.9.50

openssl-sys-v0.9.51

openssl-sys-v0.9.52

openssl-sys-v0.9.53

openssl-sys-v0.9.54

openssl-sys-v0.9.55

openssl-sys-v0.9.56

openssl-sys-v0.9.57

openssl-sys-v0.9.58

openssl-sys-v0.9.59

openssl-sys-v0.9.60

openssl-sys-v0.9.61

openssl-sys-v0.9.62

openssl-sys-v0.9.63

openssl-sys-v0.9.64

openssl-sys-v0.9.65

openssl-sys-v0.9.66

openssl-sys-v0.9.67

openssl-sys-v0.9.68

openssl-sys-v0.9.69

openssl-sys-v0.9.70

openssl-sys-v0.9.71

openssl-sys-v0.9.72

openssl-sys-v0.9.73

openssl-sys-v0.9.74

openssl-sys-v0.9.75

openssl-sys-v0.9.76

openssl-sys-v0.9.77

openssl-sys-v0.9.78

openssl-sys-v0.9.79

openssl-sys-v0.9.80

openssl-sys-v0.9.81

openssl-sys-v0.9.82

openssl-sys-v0.9.83

openssl-sys-v0.9.84

openssl-sys-v0.9.85

openssl-sys-v0.9.86

openssl-sys-v0.9.87

openssl-sys-v0.9.88

openssl-sys-v0.9.89

openssl-sys-v0.9.90

openssl-sys-v0.9.91

openssl-sys-v0.9.92

openssl-sys-v0.9.93

openssl-sys-v0.9.94

openssl-sys-v0.9.95

openssl-sys-v0.9.96

openssl-sys-v0.9.97

openssl-sys-v0.9.98

openssl-sys-v0.9.99

openssl-v0.*

openssl-v0.10.0

openssl-v0.10.1

openssl-v0.10.10

openssl-v0.10.11

openssl-v0.10.12

openssl-v0.10.13

openssl-v0.10.14

openssl-v0.10.15

openssl-v0.10.16

openssl-v0.10.17

openssl-v0.10.18

openssl-v0.10.19

openssl-v0.10.2

openssl-v0.10.20

openssl-v0.10.21

openssl-v0.10.22

openssl-v0.10.23

openssl-v0.10.24

openssl-v0.10.25

openssl-v0.10.26

openssl-v0.10.27

openssl-v0.10.28

openssl-v0.10.29

openssl-v0.10.3

openssl-v0.10.30

openssl-v0.10.31

openssl-v0.10.32

openssl-v0.10.33

openssl-v0.10.34

openssl-v0.10.35

openssl-v0.10.36

openssl-v0.10.37

openssl-v0.10.38

openssl-v0.10.39

openssl-v0.10.4

openssl-v0.10.40

openssl-v0.10.41

openssl-v0.10.42

openssl-v0.10.43

openssl-v0.10.44

openssl-v0.10.45

openssl-v0.10.46

openssl-v0.10.47

openssl-v0.10.48

openssl-v0.10.49

openssl-v0.10.5

openssl-v0.10.50

openssl-v0.10.51

openssl-v0.10.52

openssl-v0.10.53

openssl-v0.10.54

openssl-v0.10.55

openssl-v0.10.56

openssl-v0.10.57

openssl-v0.10.58

openssl-v0.10.59

openssl-v0.10.6

openssl-v0.10.60

openssl-v0.10.61

openssl-v0.10.62

openssl-v0.10.63

openssl-v0.10.64

openssl-v0.10.65

openssl-v0.10.66

openssl-v0.10.67

openssl-v0.10.68

openssl-v0.10.69

openssl-v0.10.7

openssl-v0.10.70

openssl-v0.10.71

openssl-v0.10.8

openssl-v0.10.9

openssl-v0.8.0

openssl-v0.8.1

openssl-v0.8.2

openssl-v0.8.3

openssl-v0.9.27

rust-0.*

rust-0.10

rust-0.11

rust-0.12

v0.*

v0.0.2

v0.1

v0.1.0

v0.1.1

v0.2.0

v0.2.1

v0.2.10

v0.2.11

v0.2.12

v0.2.13

v0.2.14

v0.2.15

v0.2.16

v0.2.17

v0.2.18

v0.2.2

v0.2.3

v0.2.4

v0.2.5

v0.2.6

v0.2.7

v0.2.8

v0.2.9

v0.3.0

v0.3.1

v0.3.2

v0.3.3

v0.3.4

v0.3.5

v0.3.6

v0.4.0

v0.4.1

v0.4.2

v0.4.3

v0.5.0

v0.5.2

v0.5.3

v0.5.4

v0.5.5

v0.6.0

v0.6.1

v0.6.2

v0.6.3

v0.6.4

v0.6.5

v0.6.6

v0.6.7

v0.7.0

v0.7.1

v0.7.10

v0.7.11

v0.7.12

v0.7.13

v0.7.14

v0.7.2

v0.7.3

v0.7.4

v0.7.5

v0.7.6

v0.7.7

v0.7.8

v0.7.9

v0.9.0

v0.9.1

v0.9.10

v0.9.11

v0.9.12

v0.9.13

v0.9.14

v0.9.15

v0.9.16

v0.9.17

v0.9.18

v0.9.19

v0.9.2

v0.9.20

v0.9.21

v0.9.22

v0.9.23

v0.9.3

v0.9.4

v0.9.5

v0.9.6

v0.9.7

v0.9.8

v0.9.9