Skip to content
OpenAdvisories
Critical RHSA-2024:9333 4 CVEs

Red Hat Security Advisory: openssl and openssl-fips-provider security update

Published Nov 12, 2024 · Updated Oct 9, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream openssl-debuginfo 1:3.2.2-6.el9_5
Red Hat · RHEL 9 enterprise_linux:9::appstream openssl-debugsource 1:3.2.2-6.el9_5
Red Hat · RHEL 9 enterprise_linux:9::appstream openssl-devel 1:3.2.2-6.el9_5
Red Hat · RHEL 9 enterprise_linux:9::appstream openssl-libs-debuginfo 1:3.2.2-6.el9_5
Red Hat · RHEL 9 enterprise_linux:9::appstream openssl-perl 1:3.2.2-6.el9_5
Red Hat · RHEL 9 enterprise_linux:9::baseos openssl 1:3.2.2-6.el9_5
Red Hat · RHEL 9 enterprise_linux:9::baseos openssl-debuginfo 1:3.2.2-6.el9_5
Red Hat · RHEL 9 enterprise_linux:9::baseos openssl-debugsource 1:3.2.2-6.el9_5
Red Hat · RHEL 9 enterprise_linux:9::baseos openssl-libs 1:3.2.2-6.el9_5
Red Hat · RHEL 9 enterprise_linux:9::baseos openssl-libs-debuginfo 1:3.2.2-6.el9_5

Vulnerabilities 4

  • Critical 9.8
    CVE-2024-4741

    Use After Free with SSL_free_buffers

    Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause memory to be accessed that was previously freed in some situations Impact summary: A use after free can have a range of potential consequences such as the corruption of valid data, cra…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • Critical 9.1
    CVE-2024-5535 Public exploit

    SSL_select_next_proto buffer overread

    Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer. Impact summary: A buffer overread can have a range of potential consequences suc…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 5.9
    CVE-2024-2511 EPSS 59%

    Unbounded memory growth with session handling in TLSv1.3

    Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial o…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 5.3
    CVE-2024-4603

    Excessive time spent checking DSA keys and parameters

    Issue summary: Checking excessively long DSA keys or parameters may be very slow. Impact summary: Applications that use the functions EVP_PKEY_param_check() or EVP_PKEY_public_check() to check a DSA public key or DSA parameters may experience long delays. Whe…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi

References

  • article
    https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index
  • article
    https://access.redhat.com/security/updates/classification/#low
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2274020
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2281029
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2283757
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2294581
  • article
    https://issues.redhat.com/browse/RHEL-26271
  • article
    https://issues.redhat.com/browse/RHEL-32123
  • article
    https://issues.redhat.com/browse/RHEL-38514
  • article
    https://issues.redhat.com/browse/RHEL-40723
  • article
    https://issues.redhat.com/browse/RHEL-58662
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9333.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-2511
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-2511
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-2511
  • article
    https://www.openssl.org/news/vulnerabilities.html
  • report
    https://access.redhat.com/security/cve/CVE-2024-4603
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-4603
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-4603
  • article
    https://www.openssl.org/news/secadv/20240516.txt
  • report
    https://access.redhat.com/security/cve/CVE-2024-4741
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-4741
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-4741
  • article
    https://www.openssl.org/news/secadv/20240528.txt
  • report
    https://access.redhat.com/security/cve/CVE-2024-5535
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-5535
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-5535
  • article
    https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL