CGA-pvg4-vm44-wghm
- Source
- https://images.chainguard.dev/security/CGA-pvg4-vm44-wghm
- Import Source
- https://advisories.cgr.dev/chainguard/v3/osv/CGA-pvg4-vm44-wghm.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CGA-pvg4-vm44-wghm
- Upstream
- Published
- 2025-10-30T21:26:20Z
- Modified
- 2026-07-17T19:16:16.425453278Z
- Severity
-
- 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N CVSS Calculator
- Summary
- [none]
- Details
- References
-
- http://www.openwall.com/lists/oss-security/2024/10/23/1
- http://www.openwall.com/lists/oss-security/2024/10/24/1
- https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html
- http://www.openwall.com/lists/oss-security/2024/10/16/1
- https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html
- https://security.netapp.com/advisory/ntap-20241101-0001/
- https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712
- https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154
- https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700
- https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
- https://cert-portal.siemens.com/productcert/html/ssa-277137.html
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
- https://cert-portal.siemens.com/productcert/html/ssa-769027.html
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/9xxx/CVE-2024-9143.json
- https://nvd.nist.gov/vuln/detail/CVE-2024-9143
- https://openssl-library.org/news/secadv/20241016.txt
- https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a
- https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41
Affected packages
Chainguard / openssl-engine-capi
Package
- Name
- openssl-engine-capi
- Purl
- pkg:apk/chainguard/openssl-engine-capi?arch=x86_64
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3.3.2-r2
Ecosystem specific
{
"components": [
{
"component_purl": "pkg:apk/openssl-engine-capi@3.3.2-r2",
"component_name": "openssl-engine-capi",
"architecture": "x86_64",
"latest_event_timestamp": "2024-10-19T01:15:35Z",
"component_version": "3.3.2-r2",
"component_type": "apk",
"latest_event_status": "fixed",
"component_location": "/.PKGINFO"
}
]
}
Wolfi / openssl-engine-capi
Package
- Name
- openssl-engine-capi
- Purl
- pkg:apk/wolfi/openssl-engine-capi?arch=x86_64
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3.3.2-r2
Ecosystem specific
{
"components": [
{
"component_purl": "pkg:apk/openssl-engine-capi@3.3.2-r2",
"component_name": "openssl-engine-capi",
"architecture": "x86_64",
"latest_event_timestamp": "2024-10-19T01:15:35Z",
"component_version": "3.3.2-r2",
"component_type": "apk",
"latest_event_status": "fixed",
"component_location": "/.PKGINFO"
}
]
}