CVE-2025-3416: Red Hat Directory Server 11

Low severity, CVSS 3.7. EPSS: 0.5% chance of exploitation in the next 30 days.

A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.

Affected products

• Red Hat Red Hat Directory Server 11
• Red Hat Red Hat Directory Server 12
• Red Hat Red Hat Enterprise Linux 10
• Red Hat Red Hat Enterprise Linux 6
• Red Hat Red Hat Enterprise Linux 7
• Red Hat Red Hat Enterprise Linux 8
• Red Hat Red Hat Enterprise Linux 9
• Red Hat Red Hat Openshift Container Platform 4
• Red Hat Red Hat Trusted Artifact Signer
• Red Hat Red Hat Trusted Profile Analyzer

Published 2025-04-08. Last modified 2026-06-30.