OSV-2025-491
Heap-buffer-overflow in libssl.soNUMBER
No score
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=427814448
Crash type: Heap-buffer-overflow READ 5
Crash state:
libssl.soNUMBER
libssl.soNUMBER
SSL_CTX_set_cipher_list
What each source reports
OSV No score
Heap-buffer-overflow in libssl.soNUMBER
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=427814448
Crash type: Heap-buffer-overflow READ 5
Crash state:
libssl.soNUMBER
libssl.soNUMBER
SSL_CTX_set_cipher_list
- Record
OSV-2025-491- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sudoersOSS-Fuzz |
Listed versions, plus commit ranges SUDO_1_9_1SUDO_1_9_10SUDO_1_9_11SUDO_1_9_11p1SUDO_1_9_11p2 Show 45 moreShow lessSUDO_1_9_11p3SUDO_1_9_12SUDO_1_9_12p1SUDO_1_9_12p2SUDO_1_9_13SUDO_1_9_13p1SUDO_1_9_13p2SUDO_1_9_13p3SUDO_1_9_14SUDO_1_9_14p1SUDO_1_9_14p2SUDO_1_9_14p3SUDO_1_9_15SUDO_1_9_15p1SUDO_1_9_15p2SUDO_1_9_15p3SUDO_1_9_15p4SUDO_1_9_15p5SUDO_1_9_16SUDO_1_9_16p1SUDO_1_9_16p2SUDO_1_9_2SUDO_1_9_3SUDO_1_9_3p1SUDO_1_9_4SUDO_1_9_4p1SUDO_1_9_4p2SUDO_1_9_5SUDO_1_9_5p1SUDO_1_9_5p2SUDO_1_9_6SUDO_1_9_6p1SUDO_1_9_7SUDO_1_9_7p1SUDO_1_9_7p2SUDO_1_9_8SUDO_1_9_8p1SUDO_1_9_8p2SUDO_1_9_9v1.9.1v1.9.10v1.9.11v1.9.11p1v1.9.11p2v1.9.11p3 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2025-491 is a vulnerability with no CVSS score yet in sudoers, published June 27, 2025. No source lists public exploit code. No source names a fixed version.
References
This page doesn't list everything
Left out here: 39 versions. The JSON record has them.