Skip to content
fr Sign in
3.7 Low

CVE-2025-3416 A flaw was found in OpenSSL's handling of the properties argument in certain functions

Description

A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.

Affected products and versions

Product Affected versions Fixed in
Red Hat Directory Server 11 Versions not published
Red Hat Directory Server 12 Versions not published
Red Hat Enterprise Linux 10 Versions not published
Red Hat Enterprise Linux 6 Versions not published
Red Hat Enterprise Linux 7 Versions not published
Red Hat Enterprise Linux 8 Versions not published
Red Hat Enterprise Linux 9 Versions not published
Red Hat OpenShift Container Platform 4 Versions not published
Red Hat Trusted Artifact Signer Versions not published
Show the 2 other branches
Product Affected versions Fixed in
Red Hat Trusted Profile Analyzer Versions not published
Red Hat In-Vehicle Operating System 1 Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Red Hat Directory Server 11

The 42 CVEs of Red Hat Directory Server 11 →
CVE-2026-117548 389-ds-base: 389-ds-base: null pointer dereference via modifydn using an attribute's schema alias name causes denial of service 6.5 Medium CVE-2026-86345 389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result 9.0 Critical CVE-2026-86344 389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhaustion via completed-operation-then-incomplete-pdu connection requeue 7.5 High CVE-2026-19843 389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor 8.4 High
Track this CVE