Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:SUSE-SU-2024:2953-1
HistoryAug 19, 2024 - 7:22 a.m.

Security update for openssl-1_1

2024-08-1907:22:16
Google
osv.dev

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

AI Score

7.3

Confidence

High

JSON

This update for openssl-1_1 fixes the following issues:

  • CVE-2024-2511: Fixed a denial of service due to unbounded memory growth with session handling in TLSv1.3 (bsc#1222548)
  • CVE-2024-5535: Fixed a buffer overread in function SSL_select_next_proto() with an empty supported client protocols buffer (bsc#1227138)

Related

openvas 48
nessus 66
osv 21
ubuntu 1
alpinelinux 2
nvd 3
cbl_mariner 7
openssl 2
debiancve 3
f5 1
mageia 3
cvelist 3
amazon 5
cve 3
ubuntucve 3
wolfi 2
ibm 9
redos 1
vulnrichment 3
cgr 1
redhatcve 2
freebsd 2
veracode 1
slackware 1
photon 3
paloalto 1
aix 2
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:2953-1)
2024-08-20 00:00:00
Ubuntu: Security Advisory (USN-6937-1)
2024-08-01 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:3119-1)
2024-09-04 00:00:00
nessus
nessus
SUSE SLES12 Security Update : openssl-1_1 (SUSE-SU-2024:2953-1)
2024-08-20 00:00:00
Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : OpenSSL vulnerabilities (USN-6937-1)
2024-07-31 00:00:00
SUSE SLES15 Security Update : openssl-1_1 (SUSE-SU-2024:2927-1)
2024-08-16 00:00:00
osv
osv
openssl vulnerabilities
2024-07-31 15:46:50
CGA-3mrr-589r-46qj
2024-07-15 21:50:49
Security update for openssl1
2024-08-20 14:17:31
ubuntu
ubuntu
OpenSSL vulnerabilities
2024-07-31 00:00:00
alpinelinux
alpinelinux
CVE-2024-5535
2024-06-27 11:15:24
CVE-2024-2511
2024-04-08 14:15:07
nvd
nvd
CVE-2024-5535
2024-06-27 11:15:24
CVE-2024-2511
2024-04-08 14:15:07
CVE-2024-5642
2024-06-27 21:15:16
cbl_mariner
cbl_mariner
CVE-2024-5535 affecting package openssl for versions less than 3.3.0-2
2024-07-23 22:05:39
CVE-2024-5535 affecting package openssl for versions less than 1.1.1k-35
2024-08-05 03:22:58
CVE-2024-2511 affecting package cloud-hypervisor-cvm for versions less than 38.0.72.2-1
2024-07-22 15:37:36
openssl
openssl
Vulnerability in OpenSSL CVE-2024-5535
2024-06-26 00:00:00
Vulnerability in OpenSSL CVE-2024-2511
2024-04-08 00:00:00
debiancve
debiancve
CVE-2024-5535
2024-06-27 11:15:24
CVE-2024-2511
2024-04-08 14:15:07
CVE-2024-5642
2024-06-27 21:15:16
f5
f5
K000140882: OpenSSL vulnerability CVE-2024-5535
2024-08-29 00:00:00
mageia
mageia
Updated openssl packages fix security vulnerability
2024-07-01 20:53:27
Updated openssl packages fix security vulnerability
2024-04-13 19:56:38
Updated quictls packages fix security vulnerabilities
2024-08-19 22:12:14
cvelist
cvelist
CVE-2024-5535 SSL_select_next_proto buffer overread
2024-06-27 10:30:53
CVE-2024-2511 Unbounded memory growth with session handling in TLSv1.3
2024-04-08 13:51:12
CVE-2024-5642 Buffer overread when using an empty list with SSLContext.set_npn_protocols()
2024-06-27 21:05:31
amazon
amazon
Medium: openssl
2024-08-01 03:01:00
Medium: edk2
2024-07-18 02:00:00
Medium: edk2
2024-05-09 19:16:00
cve
cve
CVE-2024-5535
2024-06-27 11:15:24
CVE-2024-2511
2024-04-08 14:15:07
CVE-2024-5642
2024-06-27 21:15:16
ubuntucve
ubuntucve
CVE-2024-5535
2024-06-27 00:00:00
CVE-2024-2511
2024-04-08 00:00:00
CVE-2024-5642
2024-06-27 00:00:00
wolfi
wolfi
CVE-2024-5535 vulnerabilities
2024-09-19 21:18:36
CVE-2024-2511 vulnerabilities
2024-09-19 21:18:36
ibm
ibm
Security Bulletin: IBM MQ Appliance is affected by a denial of service vulnerability (CVE-2024-2511)
2024-06-27 03:29:48
Security Bulletin: IBM Sterling Connect:Express for UNIX uses vulnerable version of OpenSSL
2024-07-22 12:48:00
Security Bulletin: IBM MQ Advanced Message Security on IBM i platform is affected by an issue in OpenSSL (CVE-2024-2511)
2024-09-05 21:34:51
redos
redos
ROS-20240522-04
2024-05-22 00:00:00
vulnrichment
vulnrichment
CVE-2024-2511 Unbounded memory growth with session handling in TLSv1.3
2024-04-08 13:51:12
CVE-2024-5535 SSL_select_next_proto buffer overread
2024-06-27 10:30:53
CVE-2024-5642 Buffer overread when using an empty list with SSLContext.set_npn_protocols()
2024-06-27 21:05:31
cgr
cgr
CVE-2024-2511 vulnerabilities
2024-05-19 03:07:16
redhatcve
redhatcve
CVE-2024-5535
2024-06-28 10:23:21
CVE-2024-2511
2024-04-09 06:58:20
freebsd
freebsd
OpenSSL -- Unbounded memory growth with session handling in TLSv1.3
2024-04-08 00:00:00
OpenSSL -- Multiple vulnerabilities
2024-09-03 00:00:00
veracode
veracode
Denial Of Service (DoS)
2024-04-10 19:50:39
slackware
slackware
[slackware-security] openssl
2024-07-17 19:35:44
photon
photon
Critical Photon OS Security Update - PHSA-2024-5.0-0313
2024-07-10 00:00:00
Critical Photon OS Security Update - PHSA-2024-4.0-0647
2024-07-07 00:00:00
Important Photon OS Security Update - PHSA-2024-5.0-0243
2024-04-11 00:00:00
paloalto
paloalto
Informational Bulletin: Impact of OpenSSL Vulnerabilities CVE-2024-5535 and CVE-2024-6119
2024-08-22 18:00:00
aix
aix
AIX is vulnerable to a denial of service (CVE-2024-2511 CVE-2024-0727) due to OpenSSL
2024-07-16 15:22:01
AIX is vulnerable to arbitrary code execution (CVE-2024-4741) and denial of service (CVE-2024-5535 CVE-2024-4603) due to OpenSSL
2024-07-30 15:25:31

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

AI Score

7.3

Confidence

High

JSON
Related for OSV:SUSE-SU-2024:2953-1
openvas48nessus66osv21ubuntu1alpinelinux2nvd3cbl_mariner7openssl2debiancve3f51mageia3cvelist3amazon5cve3ubuntucve3wolfi2ibm9redos1vulnrichment3cgr1redhatcve2freebsd2veracode1slackware1photon3paloalto1aix2