Lucene search
GoogleOSV:SUSE-SU-2024:2635-1HistoryJul 30, 2024 - 7:14 a.m.
Security update for openssl-3
2024-07-3007:14:10
Google
osv.dev
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
AI Score
7.4
Confidence
Low
This update for openssl-3 fixes the following issues:
Security fixes:
- CVE-2024-5535: Fixed SSL_select_next_proto buffer overread (bsc#1227138)
Other fixes:
- Build with no-afalgeng (bsc#1226463)
- Build with enabled sm2 and sm4 support (bsc#1222899)
- Fix non-reproducibility issue (bsc#1223336)
Related
alpinelinux
alpinelinux
CVE-2024-5535
2024-06-27 11:15:24
osv
osv
CGA-3mrr-589r-46qj
2024-07-15 21:50:49
Security update for openssl1
2024-08-20 14:17:31
Security update for openssl-1_1
2024-08-15 07:03:17
nessus
nessus
Amazon Linux 2 : openssl (ALAS-2024-2604)
2024-08-17 00:00:00
SUSE SLED15 / SLES15 Security Update : openssl-1_1 (SUSE-SU-2024:2933-1)
2024-08-16 00:00:00
nvd
nvd
CVE-2024-5535
2024-06-27 11:15:24
CVE-2024-5642
2024-06-27 21:15:16
cbl_mariner
cbl_mariner
CVE-2024-5535 affecting package openssl for versions less than 3.3.0-2
2024-07-23 22:05:39
CVE-2024-5535 affecting package openssl for versions less than 1.1.1k-35
2024-08-05 03:22:58
openssl
openssl
Vulnerability in OpenSSL CVE-2024-5535
2024-06-26 00:00:00
debiancve
debiancve
CVE-2024-5535
2024-06-27 11:15:24
CVE-2024-5642
2024-06-27 21:15:16
f5
f5
K000140882: OpenSSL vulnerability CVE-2024-5535
2024-08-29 00:00:00
mageia
mageia
Updated openssl packages fix security vulnerability
2024-07-01 20:53:27
Updated quictls packages fix security vulnerabilities
2024-08-19 22:12:14
cvelist
cvelist
CVE-2024-5535 SSL_select_next_proto buffer overread
2024-06-27 10:30:53
amazon
amazon
Medium: openssl
2024-08-01 03:01:00
Medium: edk2
2024-07-18 02:00:00
Medium: openssl11
2024-08-09 18:08:00
cve
cve
CVE-2024-5535
2024-06-27 11:15:24
CVE-2024-5642
2024-06-27 21:15:16
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:3119-1)
2024-09-04 00:00:00
OpenSSL Buffer Overread Vulnerability (20240627) - Windows
2024-06-27 00:00:00
openSUSE: Security Advisory for openssl (SUSE-SU-2024:2891-1)
2024-08-20 00:00:00
ubuntucve
ubuntucve
CVE-2024-5535
2024-06-27 00:00:00
CVE-2024-5642
2024-06-27 00:00:00
wolfi
wolfi
CVE-2024-5535 vulnerabilities
2024-09-19 21:18:36
vulnrichment
vulnrichment
CVE-2024-5535 SSL_select_next_proto buffer overread
2024-06-27 10:30:53
redhatcve
redhatcve
CVE-2024-5535
2024-06-28 10:23:21
photon
photon
Critical Photon OS Security Update - PHSA-2024-5.0-0313
2024-07-10 00:00:00
Critical Photon OS Security Update - PHSA-2024-4.0-0647
2024-07-07 00:00:00
paloalto
paloalto
freebsd
freebsd
OpenSSL -- Multiple vulnerabilities
2024-09-03 00:00:00
aix
aix
ibm
ibm
ubuntu
ubuntu
OpenSSL vulnerabilities
2024-07-31 00:00:00
slackware
slackware
[slackware-security] openssl
2024-07-17 19:35:44
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
AI Score
7.4
Confidence
Low
Related for OSV:SUSE-SU-2024:2635-1