CVE-2025-3416
Openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch`
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch`
A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.
Reserved 2025-04-07 | Published 2025-04-08 | Updated 2025-05-22 | Assigner redhat| 2025-04-04: | Reported to Red Hat. |
| 2025-04-04: | Made public. |
access.redhat.com/security/cve/CVE-2025-3416
bugzilla.redhat.com/show_bug.cgi?id=2357560 (RHBZ#2357560)
github.com/sfackler/rust-openssl
github.com/...ommit/87085bd67896b7f92e6de35d081f607a334beae4
github.com/sfackler/rust-openssl/pull/2390
rustsec.org/advisories/RUSTSEC-2025-0022.html
Support options
