Skip to content
OpenAdvisories
High USN-6986-1 1 CVE

openssl vulnerability

Published Sep 3, 2024 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

David Benjamin discovered that OpenSSL incorrectly handled certain
X.509 certificates. An attacker could possible use this issue to
cause a denial of service or expose sensitive information.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS openssl 3.0.2-0ubuntu1.18
Ubuntu · 24.04 LTS 24.04:LTS openssl 3.0.13-0ubuntu3.4

Vulnerabilities 1

  • High 7.5
    CVE-2024-6119 EPSS 67%

    Possible denial of service in X.509 name checks

    Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address resulting in abnormal termination of the application process. Impact summary: Abnormal termination of…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi

References

  • report
    https://ubuntu.com/security/CVE-2024-6119