The vulnerability of the SSLfree_buffers() function in the OpenSSL cryptographic library allows a hacker to execute arbitrary code or cause a service failure.

🗓️ 10 Jul 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

OpenSSL SSLfree_buffers flaw enables remote code execution or denial of service via use-after-free.

Reporter	Title	Published	Views	Family All 250
IBM Security Bulletins	Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale System are now fixed in Storage Scale System 6.2.3.3 and 7.0.0.0 or higher	15 Dec 202520:22	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge v5.1.1 is vulnerable to multiple Operator package issues	2 Apr 202517:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MaaS360 Cloud Extender VPN Module affected by vulnerability (CVE-2024-4741)	17 Jul 202414:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Wincollect is using components with known vulnerabilities	9 Jul 202417:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge v4.8.8 is vulnerable to multiple Operator package issues	1 May 202521:38	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability found in package openssl shipped with IBM CICS TX Advanced.	17 Feb 202515:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates	6 Aug 202516:37	–	ibm
IBM Security Bulletins	Security Bulletin: AIX is vulnerable to arbitrary code execution (CVE-2024-4741) and denial of service (CVE-2024-5535, CVE-2024-4603) due to OpenSSL	30 Jul 202422:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in OpenSSL (CVE-2024-4741)	28 Mar 202518:51	–	ibm

Vulners

Node

openssl opensslRange3.0.0–3.0.14

openssl opensslRange3.1.0–3.1.6

openssl opensslRange3.2.0–3.2.2

openssl opensslRange3.3.0–3.3.1

openssl opensslRange1.1.1–1.1.1y

Source	Link
redos	www.redos.red-soft.ru/support/secure/uyazvimosti/uyazvimost-openssl3-cve-2024-4741/
openssl	www.openssl.org/news/secadv/20240528.txt
github	www.github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d
security-tracker	www.security-tracker.debian.org/tracker/CVE-2024-4741
vuldb	www.vuldb.com/ru/
altsp	www.altsp.su/obnovleniya-bezopasnosti/
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.12/
wiki	www.wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0923SE17
wiki	www.wiki.astralinux.ru/astra-linux-se47-bulletin-2025-1020SE47
redos	www.redos.red-soft.ru/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-edk2-tools-cve-2024-9143-cve-2024-4741-cve-2025-2295/

15 Apr 2026 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 27.6

CVSS 38.1

EPSS0.02945