A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.
CVSS Details
- CVSS 3.1 Base Score: 3.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade aws-nitro-enclaves-cliUpgrade aws-nitro-enclaves-cli-debuginfoUpgrade aws-nitro-enclaves-cli-develUpgrade amazon-efs-utilsUpgrade aws-nitro-enclaves-cli-integration-tests | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade aws-nitro-enclaves-cli-develUpgrade aws-nitro-enclaves-cliUpgrade aws-nitro-enclaves-cli-integration-testsUpgrade amazon-efs-utils | Jan 12, 2026 | Apr 4, 2025 |
| Debian | — | Upgrade rust-opensslNo solution exists | May 15, 2025 | Apr 8, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 8, 2025 |
| Suse | — | Upgrade kanidmUpgrade s390-tools-hmcdrvfsUpgrade kanidm-serverUpgrade libekmfweb1Upgrade sevctlUpgrade afterburn-dracutUpgrade flake-pilotUpgrade libetebase-develUpgrade 389-ds-snmpUpgrade python311-cryptographyUpgrade lib389Upgrade cargo-cUpgrade kanidm-unixd-clientsUpgrade python311-maturinUpgrade 389-ds-develUpgrade himmelblauUpgrade libkmipclient1-develUpgrade libkmipclient1Upgrade keylime-ima-policyUpgrade osasnmpdUpgrade rustupUpgrade s390-tools-chreipl-fcp-mpathUpgrade himmelblau-sshd-configUpgrade afterburnUpgrade flake-pilot-podmanUpgrade kanidm-docsUpgrade sccacheUpgrade s390-toolsUpgrade snpguestUpgrade libsvrcore0Upgrade libetebase0Upgrade s390-tools-zdsfsUpgrade rust-keylimeUpgrade pam-himmelblauUpgrade 389-dsUpgrade libnss_himmelblau2Upgrade libekmfweb1-develUpgrade kanidm-clientsUpgrade s390-tools-genprotimg-data | May 13, 2025 | Apr 8, 2025 |
| Ubuntu | — | Upgrade librust-openssl-dev (Ubuntu Pro) | Nov 28, 2025 | Nov 26, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub