A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.
CVSS Details
- CVSS 3.1 Base Score: 3.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade aws-nitro-enclaves-cliUpgrade aws-nitro-enclaves-cli-develUpgrade aws-nitro-enclaves-cli-debuginfoUpgrade aws-nitro-enclaves-cli-integration-testsUpgrade amazon-efs-utils | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade aws-nitro-enclaves-cli-integration-testsUpgrade amazon-efs-utilsUpgrade aws-nitro-enclaves-cliUpgrade aws-nitro-enclaves-cli-devel | Jan 12, 2026 | Apr 4, 2025 |
| Debian | — | No solution existsUpgrade rust-openssl | May 15, 2025 | Apr 8, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 8, 2025 |
| Suse | — | Upgrade kanidm-clientsUpgrade s390-tools-zdsfsUpgrade pam-himmelblauUpgrade libekmfweb1-develUpgrade libnss_himmelblau2Upgrade keylime-ima-policyUpgrade rustupUpgrade kanidm-docsUpgrade s390-tools-genprotimg-dataUpgrade rust-keylimeUpgrade sccacheUpgrade osasnmpdUpgrade 389-dsUpgrade libsvrcore0Upgrade s390-tools-chreipl-fcp-mpathUpgrade libetebase0Upgrade snpguestUpgrade s390-toolsUpgrade libkmipclient1Upgrade afterburnUpgrade himmelblau-sshd-configUpgrade flake-pilot-podmanUpgrade libetebase-develUpgrade python311-cryptographyUpgrade kanidm-unixd-clientsUpgrade libkmipclient1-develUpgrade himmelblauUpgrade s390-tools-hmcdrvfsUpgrade 389-ds-develUpgrade flake-pilotUpgrade kanidmUpgrade lib389Upgrade libekmfweb1Upgrade afterburn-dracutUpgrade cargo-cUpgrade 389-ds-snmpUpgrade python311-maturinUpgrade kanidm-serverUpgrade sevctl | May 13, 2025 | Apr 8, 2025 |
| Ubuntu | — | Upgrade librust-openssl-dev (Ubuntu Pro) | Nov 28, 2025 | Nov 26, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub