A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.
CVSS Details
- CVSS 3.1 Base Score: 3.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade aws-nitro-enclaves-cliUpgrade aws-nitro-enclaves-cli-develUpgrade amazon-efs-utilsUpgrade aws-nitro-enclaves-cli-integration-testsUpgrade aws-nitro-enclaves-cli-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade aws-nitro-enclaves-cliUpgrade amazon-efs-utilsUpgrade aws-nitro-enclaves-cli-integration-testsUpgrade aws-nitro-enclaves-cli-devel | Jan 12, 2026 | Apr 4, 2025 |
| Debian | — | Upgrade rust-openssl | May 15, 2025 | Apr 8, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 8, 2025 |
| Suse | — | Upgrade osasnmpdUpgrade keylime-ima-policyUpgrade rust-keylimeUpgrade kanidm-docsUpgrade s390-tools-zdsfsUpgrade sccacheUpgrade libnss_himmelblau2Upgrade 389-dsUpgrade pam-himmelblauUpgrade libkmipclient1Upgrade rustupUpgrade s390-tools-genprotimg-dataUpgrade kanidm-clientsUpgrade libekmfweb1-develUpgrade s390-toolsUpgrade flake-pilot-podmanUpgrade himmelblau-sshd-configUpgrade libetebase0Upgrade libsvrcore0Upgrade snpguestUpgrade afterburnUpgrade s390-tools-chreipl-fcp-mpathUpgrade libkmipclient1-develUpgrade python311-cryptographyUpgrade 389-ds-snmpUpgrade lib389Upgrade himmelblauUpgrade python311-maturinUpgrade flake-pilotUpgrade kanidmUpgrade s390-tools-hmcdrvfsUpgrade kanidm-unixd-clientsUpgrade 389-ds-develUpgrade libetebase-develUpgrade kanidm-serverUpgrade sevctlUpgrade afterburn-dracutUpgrade libekmfweb1Upgrade cargo-c | May 13, 2025 | Apr 8, 2025 |
| Ubuntu | — | Upgrade librust-openssl-dev (Ubuntu Pro) | Nov 28, 2025 | Nov 26, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub