Out-of-bounds read in rust-openssl - CVE-2025-0977

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU108061

Out-of-bounds read in rust-openssl - CVE-2025-0977

Published: April 29, 2025


Vulnerability identifier: #VU108061
CSH Severity: Medium
CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-0977
CWE-ID: CWE-125
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition in ssl::select_next_proto. A remote attacker can initiate connection with the server, trigger an out-of-bounds read error and read contents of memory on the system or perform a denial of service (DoS) attack.


Affected software

rust-openssl
Fedora
keyring-ima-signer
rust-pore
rust-eif_build
rust-crypto-auditing-agent
keylime-agent-rust
rust-oo7-cli
fido-device-onboard
rust-snphost
dbus-parsec
clevis-pin-tpm2
bpfman
rust-cargo-vendor-filterer
rust-sevctl
rust-sequoia-policy-config
rust-openssl-sys
trustee-guest-components
rust-openssl
rust-gst-plugin-reqwest
rust-coreos-installer
rust-sequoia-sop
rust-nu
rust-sequoia-keyring-linter
rust-sequoia-sq
bootc
rust-sequoia-sqv
gotify-desktop
rust-rpm-sequoia
rust-tealdeer
rust-sequoia-octopus-librnp
libkrun
rustup
envision
s390utils
rust-afterburn
python-cryptography
rpm-ostree

How to mitigate CVE-2025-0977

Install updates from vendor's website.

rust-openssl - update to 0.10.70
keyring-ima-signer - addressed in versions 0.1.0-17.fc40, 0.1.0-17.fc41, 0.1.0-17.fc42, 0.1.0-17.fc43
rust-pore - addressed in versions 0.1.17-5.el9, 0.1.17-5.fc40, 0.1.17-5.fc41, 0.1.17-5.fc42, 0.1.17-5.fc43
rust-eif_build - addressed in versions 0.2.1-3.el9, 0.2.1-3.fc40, 0.2.1-3.fc41, 0.2.1-3.fc42, 0.2.1-3.fc43
rust-crypto-auditing-agent - addressed in versions 0.2.3-2.fc41, 0.2.3-3.fc42, 0.2.3-3.fc43
keylime-agent-rust - addressed in versions 0.2.7-4.fc40, 0.2.7-4.fc41, 0.2.7-4.fc42, 0.2.7-4.fc43
rust-oo7-cli - addressed in versions 0.3.3-4.fc41, 0.3.3-4.fc42, 0.3.3-4.fc43
fido-device-onboard - addressed in versions 0.5.0-2.fc40, 0.5.1-2.fc41, 0.5.1-3.fc42, 0.5.1-3.fc43
rust-snphost - addressed in versions 0.5.0-3.fc40, 0.5.0-3.fc41, 0.5.0-3.fc42, 0.5.0-3.fc43
dbus-parsec - addressed in versions 0.5.0-3.fc41, 0.5.0-3.fc42, 0.5.0-3.fc43
clevis-pin-tpm2 - addressed in versions 0.5.3-9.fc40, 0.5.3-9.fc41, 0.5.3-9.fc42, 0.5.3-9.fc43
bpfman - addressed in versions 0.5.4-3.fc42, 0.5.4-3.fc43
rust-cargo-vendor-filterer - addressed in versions 0.5.17-2.el9, 0.5.17-2.el10_0, 0.5.17-2.fc40, 0.5.17-2.fc41, 0.5.17-2.fc42, 0.5.17-2.fc43
rust-sevctl - addressed in versions 0.6.0-4.fc40, 0.6.0-4.fc41, 0.6.0-4.fc42, 0.6.0-4.fc43
rust-sequoia-policy-config - addressed in versions 0.7.0-3.el9, 0.7.0-3.fc40, 0.7.0-3.fc41, 0.7.0-3.fc42, 0.7.0-3.fc43
rust-openssl-sys - addressed in versions 0.9.105-1.el9, 0.9.105-1.el10_0, 0.9.105-1.fc40, 0.9.105-1.fc41, 0.9.105-1.fc42, 0.9.105-1.fc43
trustee-guest-components - addressed in versions 0.10.0^124.git0061d03-2.fc42, 0.10.0^124.git0061d03-2.fc43
rust-openssl - addressed in versions 0.10.70-1.el9, 0.10.70-1.el10_0, 0.10.70-1.fc40, 0.10.70-1.fc41, 0.10.70-1.fc42, 0.10.70-1.fc43
rust-gst-plugin-reqwest - addressed in versions 0.13.3-3.fc40, 0.13.3-3.fc41, 0.13.3-3.fc42, 0.13.3-3.fc43
rust-coreos-installer - addressed in versions 0.23.0-2.fc40, 0.23.0-2.fc41
rust-sequoia-sop - addressed in versions 0.36.0-3.fc40, 0.36.0-3.fc41, 0.36.0-3.fc42, 0.36.0-3.fc43
rust-nu - addressed in versions 0.99.1-7.el9, 0.99.1-7.fc40, 0.99.1-7.fc41, 0.99.1-7.fc42, 0.99.1-7.fc43
rust-sequoia-keyring-linter - addressed in versions 1.0.1-10.el9, 1.0.1-10.fc40, 1.0.1-10.fc41, 1.0.1-10.fc42, 1.0.1-10.fc43
rust-sequoia-sq - addressed in versions 1.1.0-4.el9, 1.1.0-4.fc40, 1.1.0-4.fc41, 1.1.0-4.fc42, 1.1.0-4.fc43
bootc - update to 1.1.5-1.fc41
rust-sequoia-sqv - addressed in versions 1.2.1-6.fc40, 1.2.1-6.fc41, 1.2.1-6.fc42, 1.2.1-6.fc43
gotify-desktop - addressed in versions 1.3.7-4.fc40, 1.3.7-4.fc41, 1.3.7-4.fc42, 1.3.7-4.fc43
rust-rpm-sequoia - addressed in versions 1.7.0-5.fc40, 1.7.0-5.fc41, 1.7.0-5.fc42, 1.7.0-5.fc43
rust-tealdeer - addressed in versions 1.7.1-3.fc40, 1.7.1-3.fc41, 1.7.1-3.fc42, 1.7.1-3.fc43
rust-sequoia-octopus-librnp - addressed in versions 1.10.0-6.fc40, 1.10.0-6.fc41, 1.10.0-6.fc42, 1.10.0-6.fc43
libkrun - addressed in versions 1.10.1-2.fc40, 1.10.1-2.fc41, 1.10.1-2.fc42, 1.10.1-2.fc43
rustup - addressed in versions 1.27.1-6.fc40, 1.27.1-6.fc41, 1.27.1-6.fc42, 1.27.1-6.fc43
envision - addressed in versions 2.0.0-4.20241209git2.0.0.fc40, 2.0.0-4.20241209git2.0.0.fc41, 2.0.0-4.20241209git2.0.0.fc42, 2.0.0-4.20241209git2.0.0.fc43
s390utils - addressed in versions 2.33.1-4.fc40, 2.35.0-2.fc41, 2.35.0-5.fc42, 2.35.0-5.fc43
rust-afterburn - addressed in versions 5.7.0-3.fc40, 5.7.0-3.fc41, 5.7.0-3.fc42, 5.7.0-3.fc43
python-cryptography - addressed in versions 43.0.0-4.fc41, 44.0.0-3.fc42, 44.0.0-3.fc43
rpm-ostree - update to 2025.5-2.fc41

External References

Related Security Bulletins