Out-of-bounds read in OpenSSL - CVE-2025-9232

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU116215

Out-of-bounds read in OpenSSL - CVE-2025-9232

Published: October 1, 2025 / Updated: April 22, 2026


Vulnerability identifier: #VU116215
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-9232
CWE-ID: CWE-125
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary condition in OpenSSL HTTP client API functions if the "no_proxy" environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. A remote attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.


Affected software

OpenSSL
Debian Linux
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
IBM AIX
Fedora
FreeBSD
Ubuntu
Basesystem Module
Web and Scripting Module
IBM VIOS
SAP NetWeaver AS JAVA
LANTIME Operating System Firmware (LTOS)
IBM Rational ClearCase
DevOps Code ClearCase
Oracle Autonomous Health Framework
openssl (Ubuntu package)
openssl (Debian package)
openssl
libopenssl-fips-provider
libopenssl-devel
openssl-3
libopenssl-3-fips-provider-32bit-debuginfo
libopenssl-3-devel
libopenssl-3-fips-provider-debuginfo
openssl-3-debuginfo
libopenssl-3-fips-provider
libopenssl3
openssl-3-debugsource
libopenssl3-debuginfo
libopenssl3-32bit-debuginfo
libopenssl-3-fips-provider-32bit
libopenssl3-32bit
openssl3
npm24
nodejs24-devel
nodejs24-debugsource
nodejs24-docs
nodejs24-debuginfo
nodejs24
edk2 (Ubuntu package)

How to mitigate CVE-2025-9232

Install updates from vendor's website.

OpenSSL - addressed in versions 3.0.18, 3.2.6, 3.3.5, 3.4.3, 3.5.4
LANTIME Operating System Firmware (LTOS) - update to 7.10.004
IBM Rational ClearCase - addressed in versions 9.1.0.10, 10.0.1.5, 11.0.0.5
DevOps Code ClearCase - update to 11.0.0.5
openssl (Ubuntu package) - addressed in versions 1.0.1f-1ubuntu2.27+esm11, 1.0.2g-1ubuntu4.20+esm13, 1.0.2n-1ubuntu5.13+esm2, 1.1.1f-1ubuntu2.24+esm1, 1.1.1-1ubuntu2.1~18.04.23+esm6, 3.0.2-0ubuntu1.20, 3.0.13-0ubuntu3.6, 3.4.1-1ubuntu4
openssl (Debian package) - addressed in versions 3.0.17-1~deb12u3, 3.5.1-1+deb13u1
openssl - addressed in versions 3.2.6-2.fc41, 3.2.6-2.fc42, 3.5.4-1.fc43
libopenssl-fips-provider - update to 3.5.0-150700.3.4.1
libopenssl-devel - update to 3.5.0-150700.3.4.1
openssl - update to 3.5.0-150700.3.4.1
openssl-3 - update to 3.5.0-150700.5.45.2
libopenssl-3-fips-provider-32bit-debuginfo - update to 3.5.0-150700.5.45.2
libopenssl-3-devel - update to 3.5.0-150700.5.45.2
libopenssl-3-fips-provider-debuginfo - update to 3.5.0-150700.5.45.2
openssl-3-debuginfo - update to 3.5.0-150700.5.45.2
libopenssl-3-fips-provider - update to 3.5.0-150700.5.45.2
libopenssl3 - update to 3.5.0-150700.5.45.2
openssl-3-debugsource - update to 3.5.0-150700.5.45.2
libopenssl3-debuginfo - update to 3.5.0-150700.5.45.2
libopenssl3-32bit-debuginfo - update to 3.5.0-150700.5.45.2
libopenssl-3-fips-provider-32bit - update to 3.5.0-150700.5.45.2
libopenssl3-32bit - update to 3.5.0-150700.5.45.2
openssl3 - update to 3.5.5-1.1.el8
npm24 - update to 24.18.1-150700.15.18.1
nodejs24-devel - update to 24.18.1-150700.15.18.1
nodejs24-debugsource - update to 24.18.1-150700.15.18.1
nodejs24-docs - update to 24.18.1-150700.15.18.1
nodejs24-debuginfo - update to 24.18.1-150700.15.18.1
nodejs24 - update to 24.18.1-150700.15.18.1
edk2 (Ubuntu package) - addressed in versions 2022.02-3ubuntu0.22.04.4, 2022.02-3ubuntu0.22.04.5, 2024.02-2ubuntu0.6, 2024.02-2ubuntu0.7, 2025.02-3ubuntu2.2

External References

Related Security Bulletins