Rust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch`

Summary

A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.

Timeline

1. Apr 8, 2025, 6:24 PM UTCCVE published
2. Apr 8, 2025, 7:02 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: no · Technical impact: partial

3. Jun 30, 2026, 7:03 AM UTCRecord last updated

Affected versions

• rust-openssl

  From 0.10.39 · fixed in 0.10.72

• redhat-ds:11/389-ds-base

  Version range not reported

• redhat-ds:12/389-ds-base

  Version range not reported

• firefox

  Version range not reported

• gjs

  Version range not reported

• rpm-ostree

  Version range not reported

• openssl

  Version range not reported

• firefox

  Version range not reported

• 389-ds:1.4/389-ds-base

  Version range not reported

• firefox

  Version range not reported

• mingw-openssl

  Version range not reported

• mozjs60

  Version range not reported

• python3.12-cryptography

  Version range not reported

• rpm-ostree

  Version range not reported

• 389-ds-base

  Version range not reported

• firefox

  Version range not reported

• firefox:flatpak/firefox

  Version range not reported

• gjs

  Version range not reported

• keylime-agent-rust

  Version range not reported

• polkit

  Version range not reported

• python3.12-cryptography

  Version range not reported

• rpm-ostree

  Version range not reported

• rust-bootupd

  Version range not reported

• kata-containers

  Version range not reported

• rpm-ostree

  Version range not reported

• rhtas/tuffer-rhel9

  Version range not reported

• rhtas/tuftool-rhel9

  Version range not reported

• rhtpa/rhtpa-trustification-service-rhel9

  Version range not reported

References 6