Lucene search

K

RedosROS-20240522-04

HistoryMay 22, 2024 - 12:00 a.m.

ROS-20240522-04

2024-05-2200:00:00

redos.red-soft.ru

5

openssl

cryptographic library

vulnerability

ssl_op_no_ticket

session cache

denial of service

attack

unix

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.4%

Vulnerability of OpenSSL cryptographic library is related to the use of non-standard option
SSL_OP_NO_TICKET option, in which case the session cache continues to grow indefinitely. Exploiting the vulnerability could
Allow an attacker acting remotely to cause a denial of service

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64openssl3<= 3.2.1-2UNKNOWN

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.4%

Related for ROS-20240522-04

cvelist1 nessus17 openvas12 nvd1 freebsd1 redhatcve1 cve1 ubuntucve1 openssl1 mageia1 osv1 cgr1 cbl_mariner2 debiancve1 alpinelinux1 amazon2 veracode1 wolfi1 photon2