{
  "cveId": "CVE-2025-3416",
  "url": "https://patchblox.com/security/cve/CVE-2025-3416",
  "summary": "CVE-2025-3416 is fixed in 21 products on 1 platform, first by librust-openssl-dev 0.10.57-1ubuntu0.1~esm1, released April 8, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "rust-openssl: A flaw was found in OpenSSL\u0027s handling of the properties argument in certain functions",
  "description": "A flaw was found in OpenSSL\u0027s handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.",
  "published": "2025-04-08T12:15:00Z",
  "severity": "low",
  "cvss": 3.7,
  "cvssVector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
  "epss": 0.00526,
  "epssPercentile": 0.44818,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "389-ds",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "2.2.10~git99.aa5d0ecbf-150600.8.20.1",
      "fix": "SUSE-SU-2025:01806-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-01806-1",
      "released": "2025-06-03T13:13:56Z"
    },
    {
      "platform": "linux",
      "product": "389-ds",
      "release": "sles 15.6",
      "fixedVersion": "2.2.10~git99.aa5d0ecbf-150600.8.20.1",
      "fix": "SUSE-SU-2025:01806-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-01806-1",
      "released": "2025-06-03T13:13:56Z"
    },
    {
      "platform": "linux",
      "product": "amazon-efs-utils",
      "release": "amzn 2023",
      "fixedVersion": "2.4.0-1.amzn2023",
      "fix": "ALAS2023-2025-1283",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1283",
      "released": "2025-11-10T12:23:00Z"
    },
    {
      "platform": "linux",
      "product": "aws-nitro-enclaves-cli",
      "release": "amzn 2023",
      "fixedVersion": "1.4.4-0.amzn2023",
      "fix": "ALAS2023-2026-1371",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1371",
      "released": "2026-02-05T22:03:00Z"
    },
    {
      "platform": "linux",
      "product": "aws-nitro-enclaves-cli-devel",
      "release": "amzn 2023",
      "fixedVersion": "1.4.4-0.amzn2023",
      "fix": "ALAS2023-2026-1371",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1371",
      "released": "2026-02-05T22:03:00Z"
    },
    {
      "platform": "linux",
      "product": "aws-nitro-enclaves-cli-integration-tests",
      "release": "amzn 2023",
      "fixedVersion": "1.4.4-0.amzn2023",
      "fix": "ALAS2023-2026-1371",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1371",
      "released": "2026-02-05T22:03:00Z"
    },
    {
      "platform": "linux",
      "product": "cargo-c",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "0.10.3~git0.ee7d7ef-150600.3.6.1",
      "fix": "SUSE-SU-2025:1570-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-1570-1",
      "released": "2025-05-16T13:44:03Z"
    },
    {
      "platform": "linux",
      "product": "forgejo-cli",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "0.6.0-bp160.1.1",
      "fix": "OPENSUSE-SU-2026:21605-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21605-1",
      "released": "2026-08-18T16:51:08Z"
    },
    {
      "platform": "linux",
      "product": "himmelblau",
      "release": "sles 15.7",
      "fixedVersion": "0.7.17\u002Bgit.0.1ebdab0-150700.3.3.2",
      "fix": "SUSE-SU-2025:02166-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02166-1",
      "released": "2025-06-30T07:14:21Z"
    },
    {
      "platform": "linux",
      "product": "kak-lsp",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "21.0.2-bp160.1.1",
      "fix": "OPENSUSE-SU-2026:21560-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21560-1",
      "released": "2026-08-10T16:06:46Z"
    },
    {
      "platform": "linux",
      "product": "kanidm",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "1.6.2~git0.a20663ea8-bp156.29.1",
      "fix": "OPENSUSE-SU-2025:0152-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2025-0152-1",
      "released": "2025-05-12T16:01:48Z"
    },
    {
      "platform": "linux",
      "product": "librust-openssl-dev",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "0.10.57-1ubuntu0.1~esm1",
      "fix": "librust-openssl-dev 0.10.57-1ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-librust-openssl-dev-0.10.57-1ubuntu0.1-esm1",
      "released": "2025-04-08T12:15:00Z"
    },
    {
      "platform": "linux",
      "product": "python-cryptography",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "41.0.3-150600.23.6.1",
      "fix": "SUSE-SU-2025:01662-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-01662-1",
      "released": "2025-05-22T16:04:44Z"
    },
    {
      "platform": "linux",
      "product": "python-cryptography",
      "release": "sles 15.6",
      "fixedVersion": "41.0.3-150600.23.6.1",
      "fix": "SUSE-SU-2025:01662-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-01662-1",
      "released": "2025-05-22T16:04:44Z"
    },
    {
      "platform": "linux",
      "product": "python-cryptography",
      "release": "sles 15.7",
      "fixedVersion": "41.0.3-150600.23.6.1",
      "fix": "SUSE-SU-2025:01662-2",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-01662-2",
      "released": "2025-05-29T13:31:03Z"
    },
    {
      "platform": "linux",
      "product": "python-maturin",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "1.4.0-150600.3.6.1",
      "fix": "SUSE-SU-2025:01591-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-01591-1",
      "released": "2025-05-19T21:24:46Z"
    },
    {
      "platform": "linux",
      "product": "rust-openssl",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "0.10.72-1",
      "fix": "DEBIAN-CVE-2025-3416",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-3416",
      "released": "2025-04-08T19:15:53Z"
    },
    {
      "platform": "linux",
      "product": "rust-openssl",
      "release": "Debian 14",
      "fixedVersion": "0.10.72-1",
      "fix": "DEBIAN-CVE-2025-3416",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-3416",
      "released": "2025-04-08T19:15:53Z"
    },
    {
      "platform": "linux",
      "product": "rustup",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "1.26.0~0-150600.10.7.1",
      "fix": "SUSE-SU-2025:03298-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03298-1",
      "released": "2025-09-23T09:01:29Z"
    },
    {
      "platform": "linux",
      "product": "rustup",
      "release": "sles 15.6",
      "fixedVersion": "1.26.0~0-150600.10.7.1",
      "fix": "SUSE-SU-2025:03298-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03298-1",
      "released": "2025-09-23T09:01:29Z"
    },
    {
      "platform": "linux",
      "product": "rustup",
      "release": "sles 15.7",
      "fixedVersion": "1.26.0~0-150600.10.7.1",
      "fix": "SUSE-SU-2025:03298-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03298-1",
      "released": "2025-09-23T09:01:29Z"
    },
    {
      "platform": "linux",
      "product": "s390-tools",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "2.31.0-150600.8.16.1",
      "fix": "SUSE-SU-2025:01619-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-01619-1",
      "released": "2025-05-21T09:57:18Z"
    },
    {
      "platform": "linux",
      "product": "s390-tools",
      "release": "sles 15.6",
      "fixedVersion": "2.31.0-150600.8.16.1",
      "fix": "SUSE-SU-2025:01619-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-01619-1",
      "released": "2025-05-21T09:57:18Z"
    },
    {
      "platform": "linux",
      "product": "s390-tools",
      "release": "sles 15.7",
      "fixedVersion": "2.37.0-150700.4.3.1",
      "fix": "SUSE-SU-2025:02017-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02017-1",
      "released": "2025-06-19T07:14:56Z"
    },
    {
      "platform": "linux",
      "product": "sccache",
      "release": "sles 15.6",
      "fixedVersion": "0.16.0~0-150600.10.11.1",
      "fix": "SUSE-SU-2026:3022-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-3022-1",
      "released": "2026-07-15T09:48:47Z"
    },
    {
      "platform": "linux",
      "product": "sccache",
      "release": "sles 15.7",
      "fixedVersion": "0.16.0~0-150600.10.11.1",
      "fix": "SUSE-SU-2026:3022-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-3022-1",
      "released": "2026-07-15T09:48:47Z"
    },
    {
      "platform": "linux",
      "product": "sevctl",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "0.4.3-150600.4.3.1",
      "fix": "SUSE-SU-2025:03307-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03307-1",
      "released": "2025-09-23T13:13:49Z"
    },
    {
      "platform": "linux",
      "product": "sevctl",
      "release": "sles 15.6",
      "fixedVersion": "0.4.3-150600.4.3.1",
      "fix": "SUSE-SU-2025:03307-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03307-1",
      "released": "2025-09-23T13:13:49Z"
    },
    {
      "platform": "linux",
      "product": "sevctl",
      "release": "sles 15.7",
      "fixedVersion": "0.6.0-150700.3.3.1",
      "fix": "SUSE-SU-2025:03306-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03306-1",
      "released": "2025-09-23T13:13:44Z"
    },
    {
      "platform": "linux",
      "product": "shadowsocks-libev",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "3.3.6-bp160.3.1",
      "fix": "OPENSUSE-SU-2026:22189-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-22189-1",
      "released": "2026-11-07T00:47:19Z"
    },
    {
      "platform": "linux",
      "product": "shadowsocks-rust",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "1.25.0-bp160.1.1",
      "fix": "OPENSUSE-SU-2026:22189-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-22189-1",
      "released": "2026-11-07T00:47:19Z"
    },
    {
      "platform": "linux",
      "product": "snpguest",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "0.3.2-150600.3.6.1",
      "fix": "SUSE-SU-2025:03445-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03445-1",
      "released": "2025-10-01T13:09:59Z"
    },
    {
      "platform": "linux",
      "product": "snpguest",
      "release": "sles 15.6",
      "fixedVersion": "0.3.2-150600.3.6.1",
      "fix": "SUSE-SU-2025:03445-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-03445-1",
      "released": "2025-10-01T13:09:59Z"
    },
    {
      "platform": "linux",
      "product": "snpguest",
      "release": "sles 15.7",
      "fixedVersion": "0.10.0-150700.3.3.1",
      "fix": "SUSE-SU-2026:0620-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0620-1",
      "released": "2026-02-24T16:36:35Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}