Lucene search

K
redhatcveRedhat.comRH:CVE-2024-0727
HistoryJan 25, 2024 - 5:20 p.m.

CVE-2024-0727

2024-01-2517:20:37
redhat.com
access.redhat.com
44
openssl
contentinfo
null dereference
denial of service
mitigation
red hat product security

6.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.8%

A flaw was found in OpenSSL. The optional ContentInfo fields can be set to null, even if the โ€œtypeโ€ is a valid value, which can lead to a null dereference error that may cause a denial of service.

Mitigation

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.