CVE-2024-4741

2024-05-2800:00:00

ubuntu.com

cve-2024-4741

openssl

upstream

severity

1.0.2

1.1.1

3.x

unix

6.7 Medium

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

JSON

Use After Free with SSL_free_buffers

Notes

Author	Note
	Priority reason: Upstream OpenSSL developers have rated this as being a low severity issue
mdeslaur	1.0.2 is not affected, 1.1.1, and 3.x are affected

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchedk2< anyUNKNOWN
ubuntu20.04noarchedk2< anyUNKNOWN
ubuntu22.04noarchedk2< anyUNKNOWN
ubuntu23.10noarchedk2< anyUNKNOWN
ubuntu24.04noarchedk2< anyUNKNOWN
ubuntu16.04noarchedk2< anyUNKNOWN
ubuntu18.04noarchnodejs< anyUNKNOWN
ubuntu22.04noarchnodejs< anyUNKNOWN
ubuntu16.04noarchnodejs< anyUNKNOWN
ubuntu18.04noarchopenssl< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	edk2	< any	UNKNOWN
ubuntu	20.04	noarch	edk2	< any	UNKNOWN
ubuntu	22.04	noarch	edk2	< any	UNKNOWN
ubuntu	23.10	noarch	edk2	< any	UNKNOWN
ubuntu	24.04	noarch	edk2	< any	UNKNOWN
ubuntu	16.04	noarch	edk2	< any	UNKNOWN
ubuntu	18.04	noarch	nodejs	< any	UNKNOWN
ubuntu	22.04	noarch	nodejs	< any	UNKNOWN
ubuntu	16.04	noarch	nodejs	< any	UNKNOWN
ubuntu	18.04	noarch	openssl	< any	UNKNOWN