Out-of-bounds read in OpenSSL - CVE-2025-9232

Vulnerability identifier: #VU116215

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-9232

CWE-ID: CWE-125

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary condition in OpenSSL HTTP client API functions if the "no_proxy" environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. A remote attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.

OpenSSL
Debian Linux
IBM AIX
Fedora
FreeBSD
Ubuntu
IBM VIOS
SAP NetWeaver AS JAVA
LANTIME Operating System Firmware (LTOS)
IBM Rational ClearCase
DevOps Code ClearCase
Oracle Autonomous Health Framework
openssl (Ubuntu package)
openssl (Debian package)
openssl
openssl3
edk2 (Ubuntu package)

Install updates from vendor's website.

OpenSSL - addressed in versions 3.0.18, 3.2.6, 3.3.5, 3.4.3, 3.5.4
LANTIME Operating System Firmware (LTOS) - update to 7.10.004
IBM Rational ClearCase - addressed in versions 9.1.0.10, 10.0.1.5, 11.0.0.5
DevOps Code ClearCase - update to 11.0.0.5
openssl (Ubuntu package) - addressed in versions 1.0.1f-1ubuntu2.27+esm11, 1.0.2g-1ubuntu4.20+esm13, 1.0.2n-1ubuntu5.13+esm2, 1.1.1f-1ubuntu2.24+esm1, 1.1.1-1ubuntu2.1~18.04.23+esm6, 3.0.2-0ubuntu1.20, 3.0.13-0ubuntu3.6, 3.4.1-1ubuntu4
openssl (Debian package) - addressed in versions 3.0.17-1~deb12u3, 3.5.1-1+deb13u1
openssl - addressed in versions 3.2.6-2.fc41, 3.2.6-2.fc42, 3.5.4-1.fc43
openssl3 - update to 3.5.5-1.1.el8
edk2 (Ubuntu package) - addressed in versions 2022.02-3ubuntu0.22.04.4, 2022.02-3ubuntu0.22.04.5, 2024.02-2ubuntu0.6, 2024.02-2ubuntu0.7, 2025.02-3ubuntu2.2

• https://openssl-library.org/news/secadv/20250930.txt

• Multiple vulnerabilities in OpenSSL
• Ubuntu update for openssl
• FreeBSD update for OpenSSL
• Debian update for openssl
• Fedora 42 update for openssl
• Fedora 41 update for openssl
• Fedora 43 update for openssl
• Meinberg LANTIME firmware update for third-party components
• Multiple vulnerabilities in IBM Rational ClearCase
• Ubuntu update for edk2
• Ubuntu update for edk2
• IBM AIX and VIOS update for OpenSSL
• Fedora EPEL 8 update for openssl3
• SAP NetWeaver AS Java update for OpenSSL
• Multiple vulnerabilities in Oracle Autonomous Health Framework