CVE catalog

CVE-2025-3416

rust-openssl vulnerabilities

[CVE catalog]

Severity
Low · CVSS 3.7CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Published
Source
[NVD] · [CVE record]
EPSS
0.52% · Oct 23, 2026

A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianrust-opensslsid0.10.81-1fixed
Debianrust-opensslforky0.10.81-1fixed
Debianrust-openssltrixie0.10.72-1fixed
Debianrust-opensslbookworm0.10.45-1vulnerable
Ubunturust-opensslnobleNot reportedvulnerable
Ubunturust-opensslnoble0.10.57-1ubuntu0.1~esm1fixed
Ubuntulibrust-openssl-devnoble0.10.57-1ubuntu0.1~esm1fixed
Opensusepijultumbleweed1.0.0~beta.23-1.1fixed
Opensuseshadowsocks-rusttumbleweed1.25.0-1.1fixed
Opensuseforgejo-clileap 16.00.6.0-bp160.1.1fixed
Opensusekak-lspleap 16.021.0.2-bp160.1.1fixed
Opensusekak-lsptumbleweed21.0.2-1.1fixed
Opensuserust-keylimetumbleweed0.2.7+117-1.1fixed
Opensuselibetebasetumbleweed0.5.8-1.1fixed
Opensuseflake-pilottumbleweed3.1.19-1.1fixed
Opensuses390-toolstumbleweed2.37.0-4.1fixed
Opensuserustuptumbleweed1.28.1~0-2.1fixed
Opensusetealdeertumbleweed1.7.1-2.1fixed
Opensusesccachetumbleweed0.9.1~22-2.1fixed
Opensusewasm-bindgentumbleweed0.2.97~0-3.1fixed
Opensuseafterburntumbleweed5.7.0.git103.bae893c-1.1fixed
Opensusekanidmtumbleweed1.6.0~git0.d7ae0f336-1.1fixed
Opensusecargo-ctumbleweed0.10.3~git0.ee7d7ef-3.1fixed
Opensuse389-dstumbleweed3.1.2~git90.2bc7250be-1.1fixed
Suseafterburnlinux micro 6.05.8.2-1.1fixed
Susepython-cryptographylinux micro 6.042.0.4-2.1fixed
Suses390-toolslinux micro 6.02.31.0-2.1fixed
Suses390-toolslinux enterprise micro 5.32.31.0-150400.7.31.1fixed
Suses390-toolslinux enterprise micro 5.42.31.0-150400.7.31.1fixed
Suses390-toolslinux enterprise server 15 sp4-ltss2.31.0-150400.7.31.1fixed
Suses390-toolsmanager server 4.32.31.0-150400.7.31.1fixed
Suse389-dslinux enterprise high performance computing 15 sp5-espos2.2.10~git99.aa5d0ecbf-150500.3.36.1fixed
Suse389-dslinux enterprise high performance computing 15 sp5-ltss2.2.10~git99.aa5d0ecbf-150500.3.36.1fixed
Suse389-dslinux enterprise server 15 sp5-ltss2.2.10~git99.aa5d0ecbf-150500.3.36.1fixed
Suse389-dslinux enterprise server for sap applications 15 sp52.2.10~git99.aa5d0ecbf-150500.3.36.1fixed
Suse389-dslinux enterprise module for server applications 15 sp62.2.10~git99.aa5d0ecbf-150600.8.20.1fixed
Opensuse389-dsleap 15.62.2.10~git99.aa5d0ecbf-150600.8.20.1fixed
Suseafterburnlinux micro 6.15.8.2-slfo.1.1_1.1fixed
Susepython-cryptographylinux micro 6.142.0.4-slfo.1.1_2.1fixed
Suses390-toolslinux enterprise module for basesystem 15 sp62.31.0-150600.8.16.1fixed
Opensuses390-toolsleap 15.62.31.0-150600.8.16.1fixed
Suses390-toolslinux micro 6.12.31.0-slfo.1.1_2.1fixed
Opensuseldap-proxytumbleweed0.1.0~90-1.1fixed
Susepython-cryptographylinux enterprise module for public cloud 15 sp441.0.3-150400.16.22.1fixed
Opensusepython-maturinleap 15.61.4.0-150600.3.6.1fixed
Susepython-cryptographylinux enterprise module for python 3 15 sp641.0.3-150600.23.6.1fixed
Opensusepython-cryptographyleap 15.641.0.3-150600.23.6.1fixed
Ubunturust-opensslpro0.10.45-1vulnerable
Ubunturust-opensslpro0.10.57-1vulnerable
Ubunturust-opensslpro0.10.57-1ubuntu0.1~esm1fixed
Susekanidmpackage hub 15 sp61.6.2~git0.a20663ea8-bp156.29.1fixed
Opensusekanidmleap 15.61.6.2~git0.a20663ea8-bp156.29.1fixed
Opensusesequoia-octopus-librnptumbleweed1.11.0-2.1fixed
Susepython-cryptographylinux enterprise module for python 3 15 sp741.0.3-150600.23.6.1fixed
Susehimmelblaulinux enterprise module for basesystem 15 sp70.7.17+git.0.1ebdab0-150700.3.3.2fixed
Opensusecargo-cleap 15.60.10.3~git0.ee7d7ef-150600.3.6.1fixed
Suses390-toolslinux enterprise module for basesystem 15 sp72.37.0-150700.4.3.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianrust-opensslsourcesid0.10.72-1not yet assignedNot reported[1102137]
Debianrust-opensslsourceforky0.10.72-1not yet assignedNot reported[1102137]
Debianrust-opensslsourcetrixie0.10.72-1not yet assignedNot reported[1102137]
Debianrust-opensslsourcebookworm(unfixed)not yet assignedNot reported[1102137]
Ubunturust-openssldebnoble0.10.57-1ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubuntulibrust-openssl-devdebnoble0.10.57-1ubuntu0.1~esm1Not reportedNot reportedNot reported
Opensusepijulrpmtumbleweed1.0.0~beta.23-1.1Not reportedOPENSUSE-SU-2026:11838-1Not reported
Opensuseshadowsocks-rustrpmtumbleweed1.25.0-1.1Not reportedOPENSUSE-SU-2026:11818-1Not reported
Opensuseforgejo-clirpmleap 16.00.6.0-bp160.1.1Not reportedOPENSUSE-SU-2026:21605-1Not reported
Opensusekak-lsprpmleap 16.021.0.2-bp160.1.1Not reportedOPENSUSE-SU-2026:21560-1Not reported
Opensusekak-lsprpmtumbleweed21.0.2-1.1Not reportedOPENSUSE-SU-2026:11475-1Not reported
Opensuserust-keylimerpmtumbleweed0.2.7+117-1.1Not reportedOPENSUSE-SU-2025:15346-1Not reported
Opensuselibetebaserpmtumbleweed0.5.8-1.1Not reportedOPENSUSE-SU-2025:15238-1Not reported
Opensuseflake-pilotrpmtumbleweed3.1.19-1.1Not reportedOPENSUSE-SU-2025:15217-1Not reported
Opensuses390-toolsrpmtumbleweed2.37.0-4.1Not reportedOPENSUSE-SU-2025:15173-1Not reported
Opensuserustuprpmtumbleweed1.28.1~0-2.1Not reportedOPENSUSE-SU-2025:15061-1Not reported
Opensusetealdeerrpmtumbleweed1.7.1-2.1Not reportedOPENSUSE-SU-2025:15063-1Not reported
Opensusesccacherpmtumbleweed0.9.1~22-2.1Not reportedOPENSUSE-SU-2025:15062-1Not reported
Opensusewasm-bindgenrpmtumbleweed0.2.97~0-3.1Not reportedOPENSUSE-SU-2025:15065-1Not reported
Opensuseafterburnrpmtumbleweed5.7.0.git103.bae893c-1.1Not reportedOPENSUSE-SU-2025:15071-1Not reported
Opensusekanidmrpmtumbleweed1.6.0~git0.d7ae0f336-1.1Not reportedOPENSUSE-SU-2025:15060-1Not reported
Opensusecargo-crpmtumbleweed0.10.3~git0.ee7d7ef-3.1Not reportedOPENSUSE-SU-2025:15057-1Not reported
Opensuse389-dsrpmtumbleweed3.1.2~git90.2bc7250be-1.1Not reportedOPENSUSE-SU-2025:15056-1Not reported
Suseafterburnrpmlinux micro 6.05.8.2-1.1Not reportedSUSE-SU-2025:20429-1Not reported
Susepython-cryptographyrpmlinux micro 6.042.0.4-2.1Not reportedSUSE-SU-2025:20407-1Not reported
Suses390-toolsrpmlinux micro 6.02.31.0-2.1Not reportedSUSE-SU-2025:20352-1Not reported
Suses390-toolsrpmlinux enterprise micro 5.32.31.0-150400.7.31.1Not reportedSUSE-SU-2025:01631-1Not reported
Suses390-toolsrpmlinux enterprise micro 5.42.31.0-150400.7.31.1Not reportedSUSE-SU-2025:01631-1Not reported
Suses390-toolsrpmlinux enterprise server 15 sp4-ltss2.31.0-150400.7.31.1Not reportedSUSE-SU-2025:01631-1Not reported
Suses390-toolsrpmmanager server 4.32.31.0-150400.7.31.1Not reportedSUSE-SU-2025:01631-1Not reported
Suse389-dsrpmlinux enterprise high performance computing 15 sp5-espos2.2.10~git99.aa5d0ecbf-150500.3.36.1Not reportedSUSE-SU-2025:01807-1Not reported
Suse389-dsrpmlinux enterprise high performance computing 15 sp5-ltss2.2.10~git99.aa5d0ecbf-150500.3.36.1Not reportedSUSE-SU-2025:01807-1Not reported
Suse389-dsrpmlinux enterprise server 15 sp5-ltss2.2.10~git99.aa5d0ecbf-150500.3.36.1Not reportedSUSE-SU-2025:01807-1Not reported
Suse389-dsrpmlinux enterprise server for sap applications 15 sp52.2.10~git99.aa5d0ecbf-150500.3.36.1Not reportedSUSE-SU-2025:01807-1Not reported
Suse389-dsrpmlinux enterprise module for server applications 15 sp62.2.10~git99.aa5d0ecbf-150600.8.20.1Not reportedSUSE-SU-2025:01806-1Not reported
Opensuse389-dsrpmleap 15.62.2.10~git99.aa5d0ecbf-150600.8.20.1Not reportedSUSE-SU-2025:01806-1Not reported
Suseafterburnrpmlinux micro 6.15.8.2-slfo.1.1_1.1Not reportedSUSE-SU-2025:20474-1Not reported
Susepython-cryptographyrpmlinux micro 6.142.0.4-slfo.1.1_2.1Not reportedSUSE-SU-2025:20463-1Not reported
Suses390-toolsrpmlinux enterprise module for basesystem 15 sp62.31.0-150600.8.16.1Not reportedSUSE-SU-2025:01619-1Not reported
Opensuses390-toolsrpmleap 15.62.31.0-150600.8.16.1Not reportedSUSE-SU-2025:01619-1Not reported
Suses390-toolsrpmlinux micro 6.12.31.0-slfo.1.1_2.1Not reportedSUSE-SU-2025:20365-1Not reported
Opensuseldap-proxyrpmtumbleweed0.1.0~90-1.1Not reportedOPENSUSE-SU-2025:15066-1Not reported
Susepython-cryptographyrpmlinux enterprise module for public cloud 15 sp441.0.3-150400.16.22.1Not reportedSUSE-SU-2025:01818-1Not reported
Opensusepython-maturinrpmleap 15.61.4.0-150600.3.6.1Not reportedSUSE-SU-2025:01591-1Not reported
Susepython-cryptographyrpmlinux enterprise module for python 3 15 sp641.0.3-150600.23.6.1Not reportedSUSE-SU-2025:01662-1Not reported
Opensusepython-cryptographyrpmleap 15.641.0.3-150600.23.6.1Not reportedSUSE-SU-2025:01662-1Not reported
Ubunturust-openssldebpro0.10.57-1ubuntu0.1~esm1Not reportedUBUNTU-CVE-2025-3416Not reported
Susekanidmrpmpackage hub 15 sp61.6.2~git0.a20663ea8-bp156.29.1Not reportedOPENSUSE-SU-2025:0152-1Not reported
Opensusekanidmrpmleap 15.61.6.2~git0.a20663ea8-bp156.29.1Not reportedOPENSUSE-SU-2025:0152-1Not reported
Opensusesequoia-octopus-librnprpmtumbleweed1.11.0-2.1Not reportedOPENSUSE-SU-2025:15068-1Not reported
Susepython-cryptographyrpmlinux enterprise module for python 3 15 sp741.0.3-150600.23.6.1Not reportedSUSE-SU-2025:01662-2Not reported
Susehimmelblaurpmlinux enterprise module for basesystem 15 sp70.7.17+git.0.1ebdab0-150700.3.3.2Not reportedSUSE-SU-2025:02166-1Not reported
Opensusecargo-crpmleap 15.60.10.3~git0.ee7d7ef-150600.3.6.1Not reportedSUSE-SU-2025:1570-1Not reported
Suses390-toolsrpmlinux enterprise module for basesystem 15 sp72.37.0-150700.4.3.1Not reportedSUSE-SU-2025:02017-1Not reported

[Debian bug #1102137]

Notes

[bookworm] rust-openssl: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • Source package: [rust-openssl]

    Details (2)
    • 0.10.45-1 · amd64 · bookworm

      Affected

      usn · rust-openssl · debian · bookworm; usn · rust-openssl · debian · 12

    • 0.10.45-1 · arm64 · bookworm

      Affected

      usn · rust-openssl · debian · bookworm; usn · rust-openssl · debian · 12

[openSUSE Tumbleweed]

  • [pijul]Affected

    Source package: [pijul]

    Details (1)
    • 1.0.0~beta.9-1.7 · x86_64 · tumbleweed

      Affected · Fixed: 1.0.0~beta.23-1.1

      usn · pijul · opensuse · tumbleweed

  • Source package: [shadowsocks-rust]

    Details (1)
    • 1.24.0-4.3 · x86_64 · tumbleweed

      Affected · Fixed: 1.25.0-1.1

      usn · shadowsocks-rust · opensuse · tumbleweed

  • [389-ds-devel]Unknown

    Source package: [389-ds]

    Details (1)
    • 3.2.2+4b41542b2-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 3.1.2~git90.2bc7250be-1.1

      Version impact unknown

      usn · 389-ds · opensuse · tumbleweed

  • [389-ds-snmp]Unknown

    Source package: [389-ds]

    Details (1)
    • 3.2.2+4b41542b2-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 3.1.2~git90.2bc7250be-1.1

      Version impact unknown

      usn · 389-ds · opensuse · tumbleweed

  • Source package: [afterburn]

    Details (1)
    • 5.10.0.git73.b97f772-2.1 · noarch · tumbleweed

      Unknown · Fixed: 5.7.0.git103.bae893c-1.1

      Version impact unknown

      usn · afterburn · opensuse · tumbleweed

  • Source package: [flake-pilot]

    Details (1)
    • 3.1.45-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 3.1.19-1.1

      Version impact unknown

      usn · flake-pilot · opensuse · tumbleweed

  • Source package: [flake-pilot]

    Details (1)
    • 3.1.45-1.1 · noarch · tumbleweed

      Unknown · Fixed: 3.1.19-1.1

      Version impact unknown

      usn · flake-pilot · opensuse · tumbleweed

  • Source package: [flake-pilot]

    Details (1)
    • 3.1.45-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 3.1.19-1.1

      Version impact unknown

      usn · flake-pilot · opensuse · tumbleweed

  • Source package: [flake-pilot]

    Details (1)
    • 3.1.45-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 3.1.19-1.1

      Version impact unknown

      usn · flake-pilot · opensuse · tumbleweed

  • Source package: [kanidm]

    Details (1)
    • 1.11.1~git0.bfb60b5cb-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 1.6.0~git0.d7ae0f336-1.1

      Version impact unknown

      usn · kanidm · opensuse · tumbleweed

  • [kanidm-docs]Unknown

    Source package: [kanidm]

    Details (1)
    • 1.11.1~git0.bfb60b5cb-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 1.6.0~git0.d7ae0f336-1.1

      Version impact unknown

      usn · kanidm · opensuse · tumbleweed

  • [kanidm-server]Unknown

    Source package: [kanidm]

    Details (1)
    • 1.11.1~git0.bfb60b5cb-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 1.6.0~git0.d7ae0f336-1.1

      Version impact unknown

      usn · kanidm · opensuse · tumbleweed

  • Source package: [kanidm]

    Details (1)
    • 1.11.1~git0.bfb60b5cb-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 1.6.0~git0.d7ae0f336-1.1

      Version impact unknown

      usn · kanidm · opensuse · tumbleweed

  • Source package: [rust-keylime]

    Details (1)
    • 0.2.9+49-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 0.2.7+117-1.1

      Version impact unknown

      usn · rust-keylime · opensuse · tumbleweed

  • [lib389]Unknown

    Source package: [389-ds]

    Details (1)
    • 3.2.2+4b41542b2-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 3.1.2~git90.2bc7250be-1.1

      Version impact unknown

      usn · 389-ds · opensuse · tumbleweed

  • [libetebase0]Unknown

    Source package: [libetebase]

    Details (1)
    • 0.5.8-1.5 · x86_64 · tumbleweed

      Unknown · Fixed: 0.5.8-1.1

      Version impact unknown

      usn · libetebase · opensuse · tumbleweed

  • Source package: [libetebase]

    Details (1)
    • 0.5.8-1.5 · x86_64 · tumbleweed

      Unknown · Fixed: 0.5.8-1.1

      Version impact unknown

      usn · libetebase · opensuse · tumbleweed

  • [libsvrcore0]Unknown

    Source package: [389-ds]

    Details (1)
    • 3.2.2+4b41542b2-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 3.1.2~git90.2bc7250be-1.1

      Version impact unknown

      usn · 389-ds · opensuse · tumbleweed

  • Source package: [pijul]

    Details (1)
    • 1.0.0~beta.9-1.7 · noarch · tumbleweed

      Unknown · Fixed: 1.0.0~beta.23-1.1

      Version impact unknown

      usn · pijul · opensuse · tumbleweed

Next results

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]