A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.
CVSS Details
- CVSS 3.1 Base Score: 3.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade aws-nitro-enclaves-cliUpgrade aws-nitro-enclaves-cli-debuginfoUpgrade aws-nitro-enclaves-cli-develUpgrade amazon-efs-utilsUpgrade aws-nitro-enclaves-cli-integration-tests | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade aws-nitro-enclaves-cli-develUpgrade amazon-efs-utilsUpgrade aws-nitro-enclaves-cli-integration-testsUpgrade aws-nitro-enclaves-cli | Jan 12, 2026 | Apr 4, 2025 |
| Debian | — | Upgrade rust-openssl | May 15, 2025 | Apr 8, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 8, 2025 |
| Suse | — | Upgrade flake-pilot-podmanUpgrade himmelblau-sshd-configUpgrade s390-tools-zdsfsUpgrade rust-keylimeUpgrade s390-tools-chreipl-fcp-mpathUpgrade afterburnUpgrade 389-dsUpgrade libsvrcore0Upgrade snpguestUpgrade osasnmpdUpgrade libetebase0Upgrade rustupUpgrade kanidm-clientsUpgrade libekmfweb1-develUpgrade keylime-ima-policyUpgrade libkmipclient1Upgrade kanidm-docsUpgrade s390-toolsUpgrade s390-tools-genprotimg-dataUpgrade sccacheUpgrade libnss_himmelblau2Upgrade pam-himmelblauUpgrade afterburn-dracutUpgrade libekmfweb1Upgrade python311-cryptographyUpgrade python311-maturinUpgrade libkmipclient1-develUpgrade kanidmUpgrade flake-pilotUpgrade cargo-cUpgrade libetebase-develUpgrade himmelblauUpgrade s390-tools-hmcdrvfsUpgrade lib389Upgrade kanidm-serverUpgrade 389-ds-develUpgrade sevctlUpgrade kanidm-unixd-clientsUpgrade 389-ds-snmp | May 13, 2025 | Apr 8, 2025 |
| Ubuntu | — | Upgrade librust-openssl-dev (Ubuntu Pro) | Nov 28, 2025 | Nov 26, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub