PT-2025-15361 · Unknown+5 · Rust-Openssl+5
CVE-2025-3416
·
Published
2025-04-04
·
Updated
2026-07-23
CVSS v3.1
3.7
Low
| Vector | AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L |
Name of the Vulnerable Software and Affected Versions
OpenSSL (affected versions not specified)
rust-openssl crate versions prior to 0.10.71
Description
A flaw exists in the handling of the properties argument within certain functions. This issue can lead to a use-after-free condition, which may result in undefined behavior or incorrect property parsing, causing the system to treat the input as an empty string. In the
rust-openssl crate, this specifically affects the Md::fetch() and Cipher::fetch() functions. Exploitation of this memory corruption could potentially allow a remote attacker to execute arbitrary code or cause a denial of service.Recommendations
Update the
rust-openssl crate to version 0.10.71 or later.
As a temporary mitigation, restrict the use of the Md::fetch() and Cipher::fetch() functions until the update is applied.Exploit
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Linuxmint
Openssl
Suse
Ubuntu
Rust-Openssl