rust openssl ssl::select_next_proto use after free

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-24898 · Microsoft / collected KEV context

EUVD-2025-0223

GHSA-rpmj-rpgj-qmpm

RUSTSEC-2025-0004

cve-program · CVE-2025-24898

• https://github.com/sfackler/rust-openssl/security/advisories/GHSA-rpmj-rpgj-qmpm
• https://github.com/sfackler/rust-openssl/pull/2360
• https://crates.io/crates/openssl

euvd · EUVD-2025-0223

• https://github.com/sfackler/rust-openssl/security/advisories/GHSA-rpmj-rpgj-qmpm
• https://github.com/sfackler/rust-openssl/pull/2360
• https://crates.io/crates/openssl

nvd · CVE-2025-24898

• https://crates.io/crates/openssl
• https://github.com/sfackler/rust-openssl/pull/2360
• https://github.com/sfackler/rust-openssl/security/advisories/GHSA-rpmj-rpgj-qmpm
• https://lists.debian.org/debian-lts-announce/2025/02/msg00009.html

osv · GHSA-rpmj-rpgj-qmpm

• https://github.com/sfackler/rust-openssl/security/advisories/GHSA-rpmj-rpgj-qmpm
• https://nvd.nist.gov/vuln/detail/CVE-2025-24898
• https://github.com/sfackler/rust-openssl/pull/2360
• https://github.com/sfackler/rust-openssl/commit/f014afb230de4d77bc79dea60e7e58c2f47b60f2
• https://crates.io/crates/openssl
• https://github.com/sfackler/rust-openssl
• https://lists.debian.org/debian-lts-announce/2025/02/msg00009.html
• https://rustsec.org/advisories/RUSTSEC-2025-0004.html

osv · RUSTSEC-2025-0004

• https://crates.io/crates/openssl
• https://rustsec.org/advisories/RUSTSEC-2025-0004.html
• https://github.com/sfackler/rust-openssl/pull/2360

No related operational record is retained in the current change model.