Lucene search
GoogleOSV:SUSE-SU-2024:2066-1HistoryJun 18, 2024 - 11:16 a.m.
Security update for openssl-3
2024-06-1811:16:10
Google
osv.dev
3
openssl
security update
cve-2024-4603
cve-2024-4741
livepatching
hdkf
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
AI Score
7.3
Confidence
Low
This update for openssl-3 fixes the following issues:
Security issues fixed:
- CVE-2024-4603: Check DSA parameters for excessive sizes before validating (bsc#1224388)
- CVE-2024-4741: Fixed a use-after-free with SSL_free_buffers. (bsc#1225551)
Other issues fixed:
- Enable livepatching support (bsc#1223428)
- Fix HDKF key derivation (bsc#1225291, gh#openssl/openssl#23448, + gh#openssl/openssl#23456)
Related
openvas
openvas
Mageia: Security Advisory (MGASA-2024-0200)
2024-06-03 00:00:00
openSUSE: Security Advisory for openssl (SUSE-SU-2024:2066-1)
2024-06-19 00:00:00
Ubuntu: Security Advisory (USN-6937-1)
2024-08-01 00:00:00
mageia
mageia
Updated openssl packages fix security vulnerabilities
2024-05-31 18:15:28
Updated quictls packages fix security vulnerabilities
2024-08-19 22:12:14
nessus
nessus
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : openssl-3 (SUSE-SU-2024:2066-1)
2024-06-19 00:00:00
OpenSSL 3.3.0 < 3.3.1 Multiple Vulnerabilities
2024-05-16 00:00:00
OpenSSL 3.0.0 < 3.0.14 Multiple Vulnerabilities
2024-04-08 00:00:00
aix
aix
ibm
ibm
osv
osv
openssl vulnerabilities
2024-07-31 15:46:50
Security update for openssl-1_1
2024-06-19 10:38:14
Security update for openssl-1_1-livepatches
2024-06-25 11:50:14
ubuntu
ubuntu
OpenSSL vulnerabilities
2024-07-31 00:00:00
redos
redos
ROS-20240704-04
2024-07-04 00:00:00
ROS-20240606-10
2024-06-06 00:00:00
cbl_mariner
cbl_mariner
debiancve
debiancve
CVE-2024-4741
2024-05-28 17:13:14
CVE-2024-4603
2024-05-16 16:15:10
alpinelinux
alpinelinux
CVE-2024-4741
2024-05-28 17:13:14
CVE-2024-4603
2024-05-16 16:15:10
ubuntucve
ubuntucve
CVE-2024-4741
2024-05-28 00:00:00
CVE-2024-4603
2024-05-16 00:00:00
redhatcve
redhatcve
CVE-2024-4741
2024-05-29 09:20:26
CVE-2024-4603
2024-05-17 20:36:02
freebsd
freebsd
OpenSSL -- Use after free vulnerability
2024-05-28 00:00:00
OpenSSL -- Denial of Service vulnerability
2024-05-16 00:00:00
f5
f5
K000140257: OpenSSL vulnerability CVE-2024-4741
2024-07-05 00:00:00
openssl
openssl
Vulnerability in OpenSSL - Use After Free with SSL_free_buffers
2024-05-27 00:00:00
Vulnerability in OpenSSL - Excessive time spent checking DSA keys and parameters
2024-05-16 00:00:00
nvd
nvd
CVE-2024-4603
2024-05-16 16:15:10
cve
cve
CVE-2024-4603
2024-05-16 16:15:10
wolfi
wolfi
CVE-2024-4603 vulnerabilities
2024-09-28 03:12:04
cvelist
cvelist
CVE-2024-4603 Excessive time spent checking DSA keys and parameters
2024-05-16 15:21:20
vulnrichment
vulnrichment
CVE-2024-4603 Excessive time spent checking DSA keys and parameters
2024-05-16 15:21:20
amazon
amazon
Medium: openssl11
2024-08-09 18:08:00
photon
photon
Important Photon OS Security Update - PHSA-2024-5.0-0301
2024-06-21 00:00:00
Critical Photon OS Security Update - PHSA-2024-4.0-0637
2024-06-24 00:00:00
slackware
slackware
[slackware-security] openssl
2024-07-17 19:35:44
oracle
oracle
Oracle Critical Patch Update Advisory - July 2024
2024-07-16 00:00:00
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
AI Score
7.3
Confidence
Low
Related for OSV:SUSE-SU-2024:2066-1