Lucene search
+L

CVE-2024-9143

🗓️ 16 Oct 2024 17:09:23Reported by opensslType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 559 Views

Use of low-level GF(2^m) elliptic curve APIs with untrusted inputs can lead to out-of-bounds memory access and possible remote code execution

Related
Detection
Affected
Refs
Social
Vulners
Node
OR
opensslopensslRange3.3.03.3.3
opensslopensslRange3.2.03.2.4
opensslopensslRange3.1.03.1.8
opensslopensslRange3.0.03.0.16
opensslopensslRange1.1.11.1.1zb
opensslopensslRange1.0.21.0.2zl
[
  {
    "defaultStatus": "unaffected",
    "product": "OpenSSL",
    "vendor": "OpenSSL",
    "versions": [
      {
        "lessThan": "3.3.3",
        "status": "affected",
        "version": "3.3.0",
        "versionType": "semver"
      },
      {
        "lessThan": "3.2.4",
        "status": "affected",
        "version": "3.2.0",
        "versionType": "semver"
      },
      {
        "lessThan": "3.1.8",
        "status": "affected",
        "version": "3.1.0",
        "versionType": "semver"
      },
      {
        "lessThan": "3.0.16",
        "status": "affected",
        "version": "3.0.0",
        "versionType": "semver"
      },
      {
        "lessThan": "1.1.1zb",
        "status": "affected",
        "version": "1.1.1",
        "versionType": "custom"
      },
      {
        "lessThan": "1.0.2zl",
        "status": "affected",
        "version": "1.0.2",
        "versionType": "custom"
      }
    ]
  }
]

syedaquib77

Vulnerability Alert: Multiple Vulnerabilities in Xerox FreeFlow Print Server v2 Addressed by April 2025 Security Patch Timeline: Disclosure: 2024-10-16, Patch: 2025-05-12 cveId: CVE-2024-9143 baseScore: 4.3 cvssMetrics: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N cvssSeverity: Medium EPSS Percentile: 57.98% exploitMaturity: Not Available affectedVersions: - Xerox FreeFlow Print Server v2 (running on Windows 10) - iGen 5 Press - Baltoro HF Production Inkjet Press - Brenva HD Production Inkjet Press fixedVersions: - Xerox FreeFlow Print Server v2 April 2025 Security Patch - OpenJDK Java 8 Update 452-b08 - Firefox 137.0.2 - Apache HTTP 2.4.63 - Apache Tomcat 6.0.45 - OpenSSL 3.4.0 - OpenSSH 9.9p1 Summary: Xerox has released a comprehensive April 2025 security patch for FreeFlow Print Server v2 on Windows 10, addressing multiple vulnerabilities including OpenSSL elliptic curve API issues (CVE-2024-9143). The update also covers bundled components like Java, Firefox, and OpenSSL, reinforcing production printing security with stricter SFTP connection requirements. Risk of exploit is low, but patching ensures compliance and protection. Recommended Actions: - Apply the April 2025 Security Patch promptly to protect against identified vulnerabilities. Related Resources: - https://t.co/e02vGreYIk - https://t.co/JBrbcZf3t4 Tags: #Xerox #FreeFlowPrintServer #Vulnerability #Patch #SecurityUpdate #ProductionPrinting #Windows10 #CVE #OpenJDK #Firefox #Apache #OpenSSL #OpenSSH #Cybersecurity

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 08:24Current
4.9Medium risk
Vulners AI Score4.9
CVSS 3.14.3
EPSS0.05842
SSVC
559