UBUNTU-CVE-2025-3416

A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.

References

Affected packages

Ubuntu:Pro:24.04:LTS / rust-openssl

Package

Name: rust-openssl
Purl: pkg:deb/ubuntu/rust-openssl@0.10.57-1ubuntu0.1~esm1?arch=source&distro=esm-apps/noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.10.57-1ubuntu0.1~esm1

Affected versions

0.*

0.10.45-1

0.10.57-1

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_version": "0.10.57-1ubuntu0.1~esm1",
            "binary_name": "librust-openssl-dev"
        }
    ]
}

Ubuntu:25.04 / rust-openssl

Package

Name: rust-openssl
Purl: pkg:deb/ubuntu/rust-openssl@0.10.70-1?arch=source&distro=plucky

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.10.64-1

0.10.68-1

0.10.70-1

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "0.10.70-1",
            "binary_name": "librust-openssl-dev"
        }
    ]
}