Every CVE Search/ Get API key

OSV-2025-491

Heap-buffer-overflow in libssl.soNUMBER

No score

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=427814448

Crash type: Heap-buffer-overflow READ 5
Crash state:
libssl.soNUMBER
libssl.soNUMBER
SSL_CTX_set_cipher_list

What each source reports

OSV No score

Heap-buffer-overflow in libssl.soNUMBER

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=427814448

Crash type: Heap-buffer-overflow READ 5
Crash state:
libssl.soNUMBER
libssl.soNUMBER
SSL_CTX_set_cipher_list
Record
OSV-2025-491
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
sudoers
OSS-Fuzz
Listed versions, plus commit ranges
SUDO_1_9_1SUDO_1_9_10SUDO_1_9_11SUDO_1_9_11p1SUDO_1_9_11p2
Show 45 moreShow less
SUDO_1_9_11p3SUDO_1_9_12SUDO_1_9_12p1SUDO_1_9_12p2SUDO_1_9_13SUDO_1_9_13p1SUDO_1_9_13p2SUDO_1_9_13p3SUDO_1_9_14SUDO_1_9_14p1SUDO_1_9_14p2SUDO_1_9_14p3SUDO_1_9_15SUDO_1_9_15p1SUDO_1_9_15p2SUDO_1_9_15p3SUDO_1_9_15p4SUDO_1_9_15p5SUDO_1_9_16SUDO_1_9_16p1SUDO_1_9_16p2SUDO_1_9_2SUDO_1_9_3SUDO_1_9_3p1SUDO_1_9_4SUDO_1_9_4p1SUDO_1_9_4p2SUDO_1_9_5SUDO_1_9_5p1SUDO_1_9_5p2SUDO_1_9_6SUDO_1_9_6p1SUDO_1_9_7SUDO_1_9_7p1SUDO_1_9_7p2SUDO_1_9_8SUDO_1_9_8p1SUDO_1_9_8p2SUDO_1_9_9v1.9.1v1.9.10v1.9.11v1.9.11p1v1.9.11p2v1.9.11p3
None known

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

OSV-2025-491 is a vulnerability with no CVSS score yet in sudoers, published June 27, 2025. No source lists public exploit code. No source names a fixed version.

References

This page doesn't list everything

Left out here: 39 versions. The JSON record has them.

MoveEnter Open