Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

The vulnerability of the OpenSSL cryptographic library, related to resource release errors, allows a hacker to cause a service failure.

🗓️ 27 May 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType 
bdu_fstec
 bdu_fstec🔗 bdu.fstec.ru👁 4 Views

OpenSSL vulnerability with resource release errors and non standard option causing session cache growth and service failure.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale System are now fixed in Storage Scale System 6.2.3.3 and 7.0.0.0 or higher
15 Dec 202520:22
–ibm
IBM Security Bulletins		Security Bulletin: IBM QRadar Wincollect is using components with known vulnerabilities
9 Jul 202417:03
–ibm
IBM Security Bulletins		Security Bulletin: This Power System update is being released to address CVE-2024-2511
16 May 202516:16
–ibm
IBM Security Bulletins		Security Bulletin: Multiple Vulnerabilities have been identified in IBM MQ shipped with IBM WebSphere Remote Server
19 Sep 202415:55
–ibm
IBM Security Bulletins		Security Bulletin: Security vulnerability found in package openssl shipped with IBM CICS TX Advanced.
17 Feb 202515:16
–ibm
IBM Security Bulletins		Security Bulletin: IBM DataPower Gateway vulnerable to DoS due to OpenSSL (CVE-2024-2511)
9 Jul 202415:27
–ibm
IBM Security Bulletins		Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues
19 Jun 202517:28
–ibm
IBM Security Bulletins		Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Operator package issues
19 Jun 202517:24
–ibm
IBM Security Bulletins		Security Bulletin: IBM MQ for HPE NonStop Server is affected by OpenSSL vulnerability CVE-2024-2511
5 Sep 202416:45
–ibm
IBM Security Bulletins		Security Bulletin: IBM MQ Appliance is affected by a denial of service vulnerability (CVE-2024-2511)
26 Jun 202422:29
–ibm
Rows per page
Vulners
Node
opensslopensslRange3.0.0–3.0.14
OR
opensslopensslRange3.1.0–3.1.6
OR
opensslopensslRange3.2.0–3.2.2
SourceLink
githubwww.github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce
githubwww.github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d
githubwww.github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08
githubwww.github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640
redoswww.redos.red-soft.ru/support/secure/
wikiwww.wiki.astralinux.ru/astra-linux-se17-bulletin-2024-0830SE17
wikiwww.wiki.astralinux.ru/astra-linux-se16-bulletin-20241017SE16
wikiwww.wiki.astralinux.ru/astra-linux-se47-bulletin-2024-1031SE47
altspwww.altsp.su/obnovleniya-bezopasnosti/
xn--80ahaefyxhnwww.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.12/
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
20 Apr 2026 00:00Current
6.5Medium risk
Vulners AI Score6.5
CVSS 25.4
CVSS 35.9
EPSS0.54026
OpenSSL vulnerabilityresource release errorsnon standard optionsession cache growthremote attackerservice failure
4