Lucene search

K
opensslOpenSSLOPENSSL:CVE-2024-5535
HistoryJun 26, 2024 - 12:00 a.m.

Vulnerability in OpenSSL CVE-2024-5535

2024-06-2600:00:00
www.openssl.org
6
openssl
vulnerability
cve-2024-5535
api
crash
memory leakage

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.2%

Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer.

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.2%