A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.
CVSS Details
- CVSS 3.1 Base Score: 3.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade aws-nitro-enclaves-cli-debuginfoUpgrade aws-nitro-enclaves-cli-develUpgrade amazon-efs-utilsUpgrade aws-nitro-enclaves-cli-integration-testsUpgrade aws-nitro-enclaves-cli | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade aws-nitro-enclaves-cli-develUpgrade amazon-efs-utilsUpgrade aws-nitro-enclaves-cliUpgrade aws-nitro-enclaves-cli-integration-tests | Jan 12, 2026 | Apr 4, 2025 |
| Debian | — | No solution existsUpgrade rust-openssl | May 15, 2025 | Apr 8, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 8, 2025 |
| Suse | — | Upgrade cargo-cUpgrade kanidm-unixd-clientsUpgrade libetebase-develUpgrade libekmfweb1Upgrade afterburn-dracutUpgrade 389-ds-develUpgrade sevctlUpgrade s390-tools-hmcdrvfsUpgrade kanidm-serverUpgrade flake-pilotUpgrade python311-cryptographyUpgrade python311-maturinUpgrade himmelblauUpgrade kanidmUpgrade libkmipclient1-develUpgrade lib389Upgrade 389-ds-snmpUpgrade libekmfweb1-develUpgrade flake-pilot-podmanUpgrade sccacheUpgrade kanidm-docsUpgrade kanidm-clientsUpgrade s390-tools-genprotimg-dataUpgrade s390-tools-chreipl-fcp-mpathUpgrade himmelblau-sshd-configUpgrade libnss_himmelblau2Upgrade keylime-ima-policyUpgrade s390-toolsUpgrade libkmipclient1Upgrade osasnmpdUpgrade snpguestUpgrade rust-keylimeUpgrade s390-tools-zdsfsUpgrade pam-himmelblauUpgrade libsvrcore0Upgrade 389-dsUpgrade libetebase0Upgrade rustupUpgrade afterburn | May 13, 2025 | Apr 8, 2025 |
| Ubuntu | — | Upgrade librust-openssl-dev (Ubuntu Pro) | Nov 28, 2025 | Nov 26, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub