A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.
CVSS Details
- CVSS 3.1 Base Score: 3.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade aws-nitro-enclaves-cliUpgrade amazon-efs-utilsUpgrade aws-nitro-enclaves-cli-develUpgrade aws-nitro-enclaves-cli-debuginfoUpgrade aws-nitro-enclaves-cli-integration-tests | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade aws-nitro-enclaves-cli-develUpgrade aws-nitro-enclaves-cli-integration-testsUpgrade aws-nitro-enclaves-cliUpgrade amazon-efs-utils | Jan 12, 2026 | Apr 4, 2025 |
| Debian | — | No solution existsUpgrade rust-openssl | May 15, 2025 | Apr 8, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 8, 2025 |
| Suse | — | Upgrade himmelblauUpgrade libkmipclient1-develUpgrade python311-cryptographyUpgrade afterburn-dracutUpgrade 389-ds-develUpgrade python311-maturinUpgrade cargo-cUpgrade lib389Upgrade kanidm-unixd-clientsUpgrade s390-tools-hmcdrvfsUpgrade 389-ds-snmpUpgrade sevctlUpgrade kanidm-serverUpgrade kanidmUpgrade libekmfweb1Upgrade libetebase-develUpgrade flake-pilotUpgrade s390-tools-genprotimg-dataUpgrade rust-keylimeUpgrade s390-toolsUpgrade libkmipclient1Upgrade libnss_himmelblau2Upgrade kanidm-clientsUpgrade rustupUpgrade libekmfweb1-develUpgrade osasnmpdUpgrade himmelblau-sshd-configUpgrade afterburnUpgrade s390-tools-chreipl-fcp-mpathUpgrade keylime-ima-policyUpgrade flake-pilot-podmanUpgrade libsvrcore0Upgrade sccacheUpgrade kanidm-docsUpgrade pam-himmelblauUpgrade 389-dsUpgrade s390-tools-zdsfsUpgrade libetebase0Upgrade snpguest | May 13, 2025 | Apr 8, 2025 |
| Ubuntu | — | Upgrade librust-openssl-dev (Ubuntu Pro) | Nov 28, 2025 | Nov 26, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub