A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-a13867ecbc advisory.

    - Update the openssl crate to version 0.10.72.
    - Update the openssl-sys crate to version 0.9.107.

    This update addresses [CVE-2025-3416](https://nvd.nist.gov/vuln/detail/CVE-2025-3416) /     [RUSTSEC-2025-0022](https://rustsec.org/advisories/RUSTSEC-2025-0022.html) (a possible use-after-free     issue in two public functions). A survey of dependent packages in Fedora shows that none of them use the     affected API, or do not use them in a way that triggers this issue.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-472776e5dc advisory.

    - Update the openssl crate to version 0.10.72.
    - Update the openssl-sys crate to version 0.9.107.

    This update addresses [CVE-2025-3416](https://nvd.nist.gov/vuln/detail/CVE-2025-3416) /     [RUSTSEC-2025-0022](https://rustsec.org/advisories/RUSTSEC-2025-0022.html) (a possible use-after-free     issue in two public functions). A survey of dependent packages in Fedora shows that none of them use the     affected API, or do not use them in a way that triggers this issue.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-a265e06eb2 advisory.

    Update Trunk to v0.21.13

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
234593	Fedora 41 : rust-openssl / rust-openssl-sys (2025-a13867ecbc)	Nessus	Fedora Local Security Checks	low
234590	Fedora 40 : rust-openssl / rust-openssl-sys (2025-472776e5dc)	Nessus	Fedora Local Security Checks	low
234589	Fedora 41 : trunk (2025-a265e06eb2)	Nessus	Fedora Local Security Checks	low

Detections

Analytics

CVE-2025-3416

low

Tenable Plugins

low

low

low