Use-after-free in rust-openssl - CVE-2025-3416

Vulnerability identifier: #VU107895

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-3416

CWE-ID: CWE-416

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a use-after-free error in openssl::cipher::Cipher::fetch. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.

rust-openssl
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
Fedora
Public Cloud Module
Development Tools Module
Basesystem Module
Server Applications Module
Python 3 Module
openSUSE Leap
Ubuntu
openEuler
Maximo Application Suite - Edge Data Collector
snpguest-debuginfo
snpguest
sevctl-debuginfo
sevctl
sevctl-debugsource
rust-openssl-sys
cargo-c-debuginfo
cargo-c
rust-openssl (Ubuntu package)
rust-openssl
trunk
python311-maturin
rustup-debugsource
rustup-debuginfo
rustup
libsvrcore0
libsvrcore0-debuginfo
389-ds
389-ds-debugsource
389-ds-snmp-debuginfo
lib389
389-ds-snmp
389-ds-debuginfo
389-ds-devel
libekmfweb1
osasnmpd-debuginfo
libkmipclient1-devel
s390-tools-hmcdrvfs
s390-tools-genprotimg-data
s390-tools-zdsfs-debuginfo
libekmfweb1-debuginfo
s390-tools-hmcdrvfs-debuginfo
osasnmpd
s390-tools-zdsfs
s390-tools-chreipl-fcp-mpath
libkmipclient1-debuginfo
libkmipclient1
libekmfweb1-devel
s390-tools-debuginfo
s390-tools-debugsource
s390-tools
python311-cryptography
icecat
rpm-ostree-help
rpm-ostree-devel
rpm-ostree-debugsource
rpm-ostree-debuginfo
rpm-ostree
rpm-ostree-libs

Install updates from vendor's website.

rust-openssl - update to 0.10.72
Maximo Application Suite - Edge Data Collector - update to 9.0.10
snpguest-debuginfo - update to 0.3.2-150600.3.6.1
snpguest - update to 0.3.2-150600.3.6.1
sevctl-debuginfo - addressed in versions 0.4.3-150600.4.3.1, 0.6.0-150700.3.3.1
sevctl - addressed in versions 0.4.3-150600.4.3.1, 0.6.0-150700.3.3.1
sevctl-debugsource - update to 0.6.0-150700.3.3.1
rust-openssl-sys - addressed in versions 0.9.107-1.el9, 0.9.107-1.el10_0, 0.9.107-1.el10_1, 0.9.107-1.fc40, 0.9.107-1.fc41, 0.9.107-1.fc42, 0.9.107-1.fc43
cargo-c-debuginfo - update to 0.10.3~git0.ee7d7ef-150600.3.6.1
cargo-c - update to 0.10.3~git0.ee7d7ef-150600.3.6.1
rust-openssl (Ubuntu package) - addressed in versions 0.10.23-1ubuntu0.1~esm1, 0.10.36-1ubuntu0.1~esm1, 0.10.57-1ubuntu0.1~esm1
rust-openssl - addressed in versions 0.10.72-1.el9, 0.10.72-1.el10_0, 0.10.72-1.el10_1, 0.10.72-1.fc40, 0.10.72-1.fc41, 0.10.72-1.fc42, 0.10.72-1.fc43
trunk - addressed in versions 0.21.13-1.fc41, 0.21.13-1.fc42
python311-maturin - update to 1.4.0-150600.3.6.1
rustup-debugsource - update to 1.26.0~0-150400.3.10.1
rustup-debuginfo - addressed in versions 1.26.0~0-150400.3.10.1, 1.26.0~0-150600.10.7.1
rustup - addressed in versions 1.26.0~0-150400.3.10.1, 1.26.0~0-150600.10.7.1
libsvrcore0 - addressed in versions 2.0.20~git64.628a24b68-150400.3.45.3, 2.2.10~git99.aa5d0ecbf-150500.3.36.1, 2.2.10~git99.aa5d0ecbf-150600.8.20.1
libsvrcore0-debuginfo - addressed in versions 2.0.20~git64.628a24b68-150400.3.45.3, 2.2.10~git99.aa5d0ecbf-150500.3.36.1, 2.2.10~git99.aa5d0ecbf-150600.8.20.1
389-ds - addressed in versions 2.0.20~git64.628a24b68-150400.3.45.3, 2.2.10~git99.aa5d0ecbf-150500.3.36.1, 2.2.10~git99.aa5d0ecbf-150600.8.20.1
389-ds-debugsource - addressed in versions 2.0.20~git64.628a24b68-150400.3.45.3, 2.2.10~git99.aa5d0ecbf-150500.3.36.1, 2.2.10~git99.aa5d0ecbf-150600.8.20.1
389-ds-snmp-debuginfo - addressed in versions 2.0.20~git64.628a24b68-150400.3.45.3, 2.2.10~git99.aa5d0ecbf-150500.3.36.1, 2.2.10~git99.aa5d0ecbf-150600.8.20.1
lib389 - addressed in versions 2.0.20~git64.628a24b68-150400.3.45.3, 2.2.10~git99.aa5d0ecbf-150500.3.36.1, 2.2.10~git99.aa5d0ecbf-150600.8.20.1
389-ds-snmp - addressed in versions 2.0.20~git64.628a24b68-150400.3.45.3, 2.2.10~git99.aa5d0ecbf-150500.3.36.1, 2.2.10~git99.aa5d0ecbf-150600.8.20.1
389-ds-debuginfo - addressed in versions 2.0.20~git64.628a24b68-150400.3.45.3, 2.2.10~git99.aa5d0ecbf-150500.3.36.1, 2.2.10~git99.aa5d0ecbf-150600.8.20.1
389-ds-devel - addressed in versions 2.0.20~git64.628a24b68-150400.3.45.3, 2.2.10~git99.aa5d0ecbf-150500.3.36.1, 2.2.10~git99.aa5d0ecbf-150600.8.20.1
libekmfweb1 - addressed in versions 2.31.0-150600.8.16.1, 2.37.0-150700.4.3.1
osasnmpd-debuginfo - addressed in versions 2.31.0-150600.8.16.1, 2.37.0-150700.4.3.1
libkmipclient1-devel - update to 2.31.0-150600.8.16.1
s390-tools-hmcdrvfs - addressed in versions 2.31.0-150600.8.16.1, 2.37.0-150700.4.3.1
s390-tools-genprotimg-data - addressed in versions 2.31.0-150600.8.16.1, 2.37.0-150700.4.3.1
s390-tools-zdsfs-debuginfo - addressed in versions 2.31.0-150600.8.16.1, 2.37.0-150700.4.3.1
libekmfweb1-debuginfo - addressed in versions 2.31.0-150600.8.16.1, 2.37.0-150700.4.3.1
s390-tools-hmcdrvfs-debuginfo - addressed in versions 2.31.0-150600.8.16.1, 2.37.0-150700.4.3.1
osasnmpd - addressed in versions 2.31.0-150600.8.16.1, 2.37.0-150700.4.3.1
s390-tools-zdsfs - addressed in versions 2.31.0-150600.8.16.1, 2.37.0-150700.4.3.1
s390-tools-chreipl-fcp-mpath - addressed in versions 2.31.0-150600.8.16.1, 2.37.0-150700.4.3.1
libkmipclient1-debuginfo - addressed in versions 2.31.0-150600.8.16.1, 2.37.0-150700.4.3.1
libkmipclient1 - addressed in versions 2.31.0-150600.8.16.1, 2.37.0-150700.4.3.1
libekmfweb1-devel - addressed in versions 2.31.0-150600.8.16.1, 2.37.0-150700.4.3.1
s390-tools-debuginfo - addressed in versions 2.31.0-150600.8.16.1, 2.37.0-150700.4.3.1
s390-tools-debugsource - addressed in versions 2.31.0-150600.8.16.1, 2.37.0-150700.4.3.1
s390-tools - addressed in versions 2.31.0-150600.8.16.1, 2.37.0-150700.4.3.1
python311-cryptography - addressed in versions 41.0.3-150400.16.22.1, 41.0.3-150600.23.6.1
icecat - addressed in versions 115.22.0-2.rh1.fc40, 115.22.0-2.rh1.fc41, 115.22.0-2.rh1.fc42
rpm-ostree-help - update to 2022.16-11
rpm-ostree-devel - addressed in versions 2022.16-11, 2024.4-7
rpm-ostree-debugsource - addressed in versions 2022.16-11, 2024.4-7
rpm-ostree-debuginfo - addressed in versions 2022.16-11, 2024.4-7
rpm-ostree - addressed in versions 2022.16-11, 2024.4-7
rpm-ostree-libs - update to 2024.4-7
rpm-ostree - addressed in versions 2025.8-1.fc40, 2025.8-1.fc41

• https://access.redhat.com/security/cve/CVE-2025-3416
• https://bugzilla.redhat.com/show_bug.cgi?id=2357560
• https://github.com/sfackler/rust-openssl
• https://github.com/sfackler/rust-openssl/commit/87085bd67896b7f92e6de35d081f607a334beae4
• https://github.com/sfackler/rust-openssl/pull/2390
• https://rustsec.org/advisories/RUSTSEC-2025-0022.html

• Denial of service in rust-openssl
• Fedora 42 update for trunk
• Fedora 41 update for trunk
• Fedora 43 update for rust-openssl, rust-openssl-sys
• Fedora 42 update for rust-openssl, rust-openssl-sys
• Fedora 41 update for rust-openssl, rust-openssl-sys
• Fedora 40 update for rust-openssl, rust-openssl-sys
• Fedora EPEL 10.1 update for rust-openssl, rust-openssl-sys
• Fedora EPEL 10.0 update for rust-openssl, rust-openssl-sys
• Fedora EPEL 9 update for rust-openssl, rust-openssl-sys
• Fedora 41 update for icecat
• Fedora 40 update for icecat
• Fedora 42 update for icecat
• Fedora 40 update for rpm-ostree
• Fedora 41 update for rpm-ostree
• SUSE update for rustup
• SUSE update for cargo-c
• SUSE update for s390-tools
• SUSE update for python-cryptography
• SUSE update for python-cryptography
• IBM Edge Data Collector update for OpenSSL
• SUSE update for 389-ds
• SUSE update for 389-ds
• SUSE update for python-cryptography
• SUSE update for s390-tools
• SUSE update for 389-ds
• SUSE update for python-maturin
• Ubuntu update for rust-openssl
• SUSE update for rustup
• SUSE update for sevctl
• SUSE update for sevctl
• SUSE update for snpguest
• openEuler 24.03 LTS SP3 update for rpm-ostree
• openEuler 24.03 LTS SP1 update for rpm-ostree
• openEuler 22.03 LTS SP4 update for rpm-ostree