OpenSSL
OpenSSL Security Releases - January 2024
openssl-2024-01 Jan 1, 2024 Source: Vendor
OpenSSL security advisories for January 2024, compiled from CVE.org records.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.cve.org/CVERecord?id=CVE-2023-6129
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
2 lines
Showing 1–2 of 2
CVE-2023-6129
BR2024-0000-031350
OpenSSL
unclaimed
Issue summary: The POLY1305 MAC (message authentication code) implementation
contains a bug that might corrupt the internal state of applications running
on PowerPC CPU based platforms if the CPU p...
Credited as Sverker Eriksson
CVE-2024-0727
BR2024-0000-031810
OpenSSL
unclaimed
Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL
to crash leading to a potential Denial of Service attack
Impact summary: Applications loading files in the PKCS12 for...
Credited as Bahaa Naamneh (Crosspoint Labs)