PT-2024-29681

🗓️ 25 Aug 2024 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 1 Views

DH key order validation flaw may trigger costly server Diffie-Hellman computations in OpenSSL 1.x–1.1.1, 3.x–3.0.5, and pre-17.0.5.

Reporter	Title	Published	Views	Family All 200
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Edge Application Manager	20 Aug 202502:37	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities exists in IBM Netezza Performance Server Replication Services	27 Feb 202619:55	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in cryptography affects IBM Cloud Pak for Data System 2.0 (CPDS 2.0) [CVE-2023-0286, CVE-2023-50782]	20 Jun 202510:08	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cryptography and Jinja [CVE-2023-50782, CVE-2024-22195]	8 Apr 202412:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues	19 Jun 202517:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses cryptography-41.0.2-cp37-abi3-manylinux_2_28_x86_64.whl which is vulnerable to CVE-2023-50782	29 May 202406:30	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in cryptography affects IBM Process Mining CVE-2023-50782	29 Mar 202410:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Truststore Manager uses cryptography-41.0.4-cp37-abi3-manylinux_2_28_x86_64.whl which is vulnerable to CVE-2023-50782	29 May 202414:52	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	10 Apr 202409:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to sensitive information exposure in Python Cryptographic Authority [CVE-2023-50782]	25 Apr 202418:31	–	ibm

Source	Link
suse	www.suse.com/security/cve/CVE-2023-50782.html
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2024-41996
lists	www.lists.suse.com/pipermail/sle-security-updates/2024-October/019552.html
twitter	www.twitter.com/cracbot/status/1829761083441111469
lists	www.lists.opensuse.org/archives/list/[email protected]/thread/7ZCWYN575HVHPW6465ZYXKGQEX4QPOGT
suse	www.suse.com/support/update/announcement/2024/suse-su-20243500-1
osv	www.osv.dev/vulnerability/SUSE-SU-2024:3500-1
redos	www.redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/uyazvimost-openssl3-cve-2024-41996
osv	www.osv.dev/vulnerability/SUSE-SU-2024:3871-1
bugzilla	www.bugzilla.suse.com/1220262

06 Oct 2025 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 27.8

CVSS 3.17.5

EPSS0.00879

SSVC