It was discovered that OpenSSL incorrectly handled TLSv1.3 sessions when certain non-default TLS server configurations were in use. A remote attacker could possibly use this issue to cause OpenSSL to consume resources, leading to a denial of service. (CVE-2024-2511)
It was discovered that OpenSSL incorrectly handled checking excessively long DSA keys or parameters. A remote attacker could possibly use this issue to cause OpenSSL to consume resources, leading to a denial of service. This issue only affected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2024-4603)
William Ahern discovered that OpenSSL incorrectly handled certain memory operations in a rarely-used API. A remote attacker could use this issue to cause OpenSSL to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2024-4741)
Joseph Birr-Pixton discovered that OpenSSL incorrectly handled calling a certain API with an empty supported client protocols buffer. A remote attacker could possibly use this issue to obtain sensitive information, or cause OpenSSL to crash, resulting in a denial of service. (CVE-2024-5535)
{ "availability": "No subscription required", "binaries": [ { "binary_name": "libcrypto1.1-udeb", "binary_version": "1.1.1f-1ubuntu2.23" }, { "binary_name": "libssl-dev", "binary_version": "1.1.1f-1ubuntu2.23" }, { "binary_name": "libssl-doc", "binary_version": "1.1.1f-1ubuntu2.23" }, { "binary_name": "libssl1.1", "binary_version": "1.1.1f-1ubuntu2.23" }, { "binary_name": "libssl1.1-dbgsym", "binary_version": "1.1.1f-1ubuntu2.23" }, { "binary_name": "libssl1.1-udeb", "binary_version": "1.1.1f-1ubuntu2.23" }, { "binary_name": "openssl", "binary_version": "1.1.1f-1ubuntu2.23" }, { "binary_name": "openssl-dbgsym", "binary_version": "1.1.1f-1ubuntu2.23" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "libssl-dev", "binary_version": "3.0.2-0ubuntu1.17" }, { "binary_name": "libssl-doc", "binary_version": "3.0.2-0ubuntu1.17" }, { "binary_name": "libssl3", "binary_version": "3.0.2-0ubuntu1.17" }, { "binary_name": "libssl3-dbgsym", "binary_version": "3.0.2-0ubuntu1.17" }, { "binary_name": "openssl", "binary_version": "3.0.2-0ubuntu1.17" }, { "binary_name": "openssl-dbgsym", "binary_version": "3.0.2-0ubuntu1.17" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "libssl-dev", "binary_version": "3.0.13-0ubuntu3.2" }, { "binary_name": "libssl-doc", "binary_version": "3.0.13-0ubuntu3.2" }, { "binary_name": "libssl3t64", "binary_version": "3.0.13-0ubuntu3.2" }, { "binary_name": "libssl3t64-dbgsym", "binary_version": "3.0.13-0ubuntu3.2" }, { "binary_name": "openssl", "binary_version": "3.0.13-0ubuntu3.2" }, { "binary_name": "openssl-dbgsym", "binary_version": "3.0.13-0ubuntu3.2" } ] }