CVE catalog
CVE-2026-41677
rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.0 to before 0.10.78, the *_from_pem_callback APIs did not validate the length returned by the user's callback. A pas
- Severity
- Low · CVSS 3.7
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.29% · Oct 23, 2026
rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.0 to before 0.10.78, the *_from_pem_callback APIs did not validate the length returned by the user's callback. A password callback that returns a value larger than the buffer it was given can cause some versions of OpenSSL to over-read this buffer. OpenSSL 3.x is not affected by this. This vulnerability is fixed in 0.10.78.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | rust-openssl | sid | 0.10.81-1 | fixed |
| Debian | rust-openssl | forky | 0.10.81-1 | fixed |
| Debian | rust-openssl | trixie | 0.10.72-1 | vulnerable |
| Debian | rust-openssl | bookworm | 0.10.45-1 | vulnerable |
| Cpe | rust-openssl | Not reported | Not reported | vulnerable |
| Cpe | rust-openssl | Not reported | 0.10.78 | fixed |
| Suse | snphost | linux enterprise server 16.0 | 0.6.0-160000.3.1 | fixed |
| Suse | snphost | linux enterprise server for sap applications 16.0 | 0.6.0-160000.3.1 | fixed |
| Opensuse | snpguest | tumbleweed | 0.10.0-3.1 | fixed |
| Opensuse | snphost | tumbleweed | 0.7.0-3.1 | fixed |
| Opensuse | snphost | leap 16.0 | 0.6.0-160000.3.1 | fixed |
| Suse | snpguest | linux enterprise server 16.0 | 0.10.0-160000.2.1 | fixed |
| Suse | snpguest | linux enterprise server for sap applications 16.0 | 0.10.0-160000.2.1 | fixed |
| Suse | snpguest | linux enterprise module for server applications 15 sp7 | 0.10.0-150700.3.6.1 | fixed |
| Suse | snphost | linux enterprise module for confidential computing technical preview 15 sp7 | 0.6.1-150700.3.6.1 | fixed |
| Opensuse | snpguest | leap 16.0 | 0.10.0-160000.2.1 | fixed |
| Suse | aws-nitro-enclaves-cli | linux enterprise server 16.0 | 1.4.5~git0.18a5f6f-160000.1.1 | fixed |
| Suse | aws-nitro-enclaves-cli | linux enterprise server for sap applications 16.0 | 1.4.5~git0.18a5f6f-160000.1.1 | fixed |
| Opensuse | aws-nitro-enclaves-cli | leap 16.0 | 1.4.5~git0.18a5f6f-160000.1.1 | fixed |
| Suse | aws-nitro-enclaves-cli | linux enterprise module for public cloud 15 sp6 | 1.4.5~git0.18a5f6f-150600.10.12.1 | fixed |
| Suse | aws-nitro-enclaves-cli | linux enterprise module for public cloud 15 sp7 | 1.4.5~git0.18a5f6f-150600.10.12.1 | fixed |
| Suse | agama | linux enterprise server 16.0 | 17+647.daf9950fc-160000.12.1 | fixed |
| Suse | agama | linux enterprise server for sap applications 16.0 | 17+647.daf9950fc-160000.12.1 | fixed |
| Opensuse | sdbootutil | tumbleweed | 1+git20260713.d869cf8-1.1 | fixed |
| Opensuse | agama | leap 16.0 | 17+647.daf9950fc-160000.12.1 | fixed |
| Opensuse | rustup | tumbleweed | 1.28.2~0-5.1 | fixed |
| Opensuse | sccache | tumbleweed | 0.16.0~0-3.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | rust-openssl | source | sid | 0.10.78-1 | not yet assigned | Not reported | [1134881] |
| Debian | rust-openssl | source | forky | 0.10.78-1 | not yet assigned | Not reported | [1134881] |
| Debian | rust-openssl | source | trixie | (unfixed) | not yet assigned | Not reported | [1134881] |
| Debian | rust-openssl | source | bookworm | (unfixed) | not yet assigned | Not reported | [1134881] |
| Cpe | rust-openssl | cpe | Not reported | 0.10.78 | Not reported | Not reported | Not reported |
| Suse | snphost | rpm | linux enterprise server 16.0 | 0.6.0-160000.3.1 | Not reported | SUSE-SU-2026:23327-1 | Not reported |
| Suse | snphost | rpm | linux enterprise server for sap applications 16.0 | 0.6.0-160000.3.1 | Not reported | SUSE-SU-2026:23327-1 | Not reported |
| Opensuse | snpguest | rpm | tumbleweed | 0.10.0-3.1 | Not reported | OPENSUSE-SU-2026:11653-1 | Not reported |
| Opensuse | snphost | rpm | tumbleweed | 0.7.0-3.1 | Not reported | OPENSUSE-SU-2026:11654-1 | Not reported |
| Opensuse | snphost | rpm | leap 16.0 | 0.6.0-160000.3.1 | Not reported | OPENSUSE-SU-2026:21638-1 | Not reported |
| Suse | snpguest | rpm | linux enterprise server 16.0 | 0.10.0-160000.2.1 | Not reported | SUSE-SU-2026:23236-1 | Not reported |
| Suse | snpguest | rpm | linux enterprise server for sap applications 16.0 | 0.10.0-160000.2.1 | Not reported | SUSE-SU-2026:23236-1 | Not reported |
| Suse | snpguest | rpm | linux enterprise module for server applications 15 sp7 | 0.10.0-150700.3.6.1 | Not reported | SUSE-SU-2026:3791-1 | Not reported |
| Suse | snphost | rpm | linux enterprise module for confidential computing technical preview 15 sp7 | 0.6.1-150700.3.6.1 | Not reported | SUSE-SU-2026:3642-1 | Not reported |
| Opensuse | snpguest | rpm | leap 16.0 | 0.10.0-160000.2.1 | Not reported | OPENSUSE-SU-2026:21579-1 | Not reported |
| Suse | aws-nitro-enclaves-cli | rpm | linux enterprise server 16.0 | 1.4.5~git0.18a5f6f-160000.1.1 | Not reported | SUSE-SU-2026:22841-1 | Not reported |
| Suse | aws-nitro-enclaves-cli | rpm | linux enterprise server for sap applications 16.0 | 1.4.5~git0.18a5f6f-160000.1.1 | Not reported | SUSE-SU-2026:22841-1 | Not reported |
| Opensuse | aws-nitro-enclaves-cli | rpm | leap 16.0 | 1.4.5~git0.18a5f6f-160000.1.1 | Not reported | OPENSUSE-SU-2026:21406-1 | Not reported |
| Suse | aws-nitro-enclaves-cli | rpm | linux enterprise module for public cloud 15 sp6 | 1.4.5~git0.18a5f6f-150600.10.12.1 | Not reported | SUSE-SU-2026:3152-1 | Not reported |
| Suse | aws-nitro-enclaves-cli | rpm | linux enterprise module for public cloud 15 sp7 | 1.4.5~git0.18a5f6f-150600.10.12.1 | Not reported | SUSE-SU-2026:3152-1 | Not reported |
| Suse | agama | rpm | linux enterprise server 16.0 | 17+647.daf9950fc-160000.12.1 | Not reported | SUSE-SU-2026:22622-1 | Not reported |
| Suse | agama | rpm | linux enterprise server for sap applications 16.0 | 17+647.daf9950fc-160000.12.1 | Not reported | SUSE-SU-2026:22622-1 | Not reported |
| Opensuse | sdbootutil | rpm | tumbleweed | 1+git20260713.d869cf8-1.1 | Not reported | OPENSUSE-SU-2026:11262-1 | Not reported |
| Opensuse | agama | rpm | leap 16.0 | 17+647.daf9950fc-160000.12.1 | Not reported | OPENSUSE-SU-2026:21292-1 | Not reported |
| Opensuse | rustup | rpm | tumbleweed | 1.28.2~0-5.1 | Not reported | OPENSUSE-SU-2026:11223-1 | Not reported |
| Opensuse | sccache | rpm | tumbleweed | 0.16.0~0-3.1 | Not reported | OPENSUSE-SU-2026:11224-1 | Not reported |
Notes
[trixie] rust-openssl: Minor issue [bookworm] rust-openssl: Minor issue
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [librust-openssl-dev]Affected
Source package: [rust-openssl]
Details (2)
0.10.45-1· amd64 · bookwormAffected
nvd · rust-openssl · debian · bookworm; nvd · rust-openssl · debian · 12
0.10.45-1· arm64 · bookwormAffected
nvd · rust-openssl · debian · bookworm; nvd · rust-openssl · debian · 12
[Debian 13 (Trixie)]
- [librust-openssl-dev]Affected
Source package: [rust-openssl]
Details (2)
0.10.72-1· amd64 · trixieAffected
nvd · rust-openssl · debian · 13
0.10.72-1· arm64 · trixieAffected
nvd · rust-openssl · debian · 13
[openSUSE Tumbleweed]
- [snpguest]Affected
Source package: [snpguest]
Details (1)
0.10.0-2.5· x86_64 · tumbleweedAffected · Fixed:
0.10.0-3.1nvd · snpguest · opensuse · tumbleweed
- [snphost]Affected
Source package: [snphost]
Details (1)
0.7.0-2.2· x86_64 · tumbleweedAffected · Fixed:
0.7.0-3.1nvd · snphost · opensuse · tumbleweed
- [sdbootutil-bash-completion]Unknown
Source package: [sdbootutil]
Details (1)
1+git20260825.c7a5a97-1.1· noarch · tumbleweedUnknown · Fixed:
1+git20260713.d869cf8-1.1Version impact unknown
nvd · sdbootutil · opensuse · tumbleweed
- [sdbootutil-dracut-measure-pcr]Unknown
Source package: [sdbootutil]
Details (1)
1+git20260825.c7a5a97-1.1· noarch · tumbleweedUnknown · Fixed:
1+git20260713.d869cf8-1.1Version impact unknown
nvd · sdbootutil · opensuse · tumbleweed
- [sdbootutil-enroll]Unknown
Source package: [sdbootutil]
Details (1)
1+git20260825.c7a5a97-1.1· noarch · tumbleweedUnknown · Fixed:
1+git20260713.d869cf8-1.1Version impact unknown
nvd · sdbootutil · opensuse · tumbleweed
- [sdbootutil-jeos-firstboot-enroll]Unknown
Source package: [sdbootutil]
Details (1)
1+git20260825.c7a5a97-1.1· noarch · tumbleweedUnknown · Fixed:
1+git20260713.d869cf8-1.1Version impact unknown
nvd · sdbootutil · opensuse · tumbleweed
- [sdbootutil-kernel-install]Unknown
Source package: [sdbootutil]
Details (1)
1+git20260825.c7a5a97-1.1· noarch · tumbleweedUnknown · Fixed:
1+git20260713.d869cf8-1.1Version impact unknown
nvd · sdbootutil · opensuse · tumbleweed
- [sdbootutil-snapper]Unknown
Source package: [sdbootutil]
Details (1)
1+git20260825.c7a5a97-1.1· noarch · tumbleweedUnknown · Fixed:
1+git20260713.d869cf8-1.1Version impact unknown
nvd · sdbootutil · opensuse · tumbleweed
- [sdbootutil-tukit]Unknown
Source package: [sdbootutil]
Details (1)
1+git20260825.c7a5a97-1.1· noarch · tumbleweedUnknown · Fixed:
1+git20260713.d869cf8-1.1Version impact unknown
nvd · sdbootutil · opensuse · tumbleweed
- [rustup]Fixed
Source package: [rustup]
Details (1)
1.29.0~0-1.1· x86_64 · tumbleweedFixed · Fixed:
1.28.2~0-5.1nvd · rustup · opensuse · tumbleweed
- [sccache]Fixed
Source package: [sccache]
Details (1)
0.17.0~1-2.1· x86_64 · tumbleweedFixed · Fixed:
0.16.0~0-3.1nvd · sccache · opensuse · tumbleweed
- [sdbootutil]Fixed
Source package: [sdbootutil]
Details (1)
1+git20260825.c7a5a97-1.1· x86_64 · tumbleweedFixed · Fixed:
1+git20260713.d869cf8-1.1nvd · sdbootutil · opensuse · tumbleweed
Observed:
References
- [https://ftp.suse.com/pub/projects/security/]
- [https://nvd.nist.gov/vuln/detail/CVE-2026-41677]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2026-41677]
- [https://osv.dev/vulnerability/SUSE-SU-2026:22622-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:22841-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:23236-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:23327-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:3152-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:3642-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:3791-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:11223-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:11224-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:11262-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:11653-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:11654-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:21292-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:21406-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:21579-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:21638-1]
- [https://security-tracker.debian.org/tracker/CVE-2026-41677]
- [https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1657.json]
[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]