OpenSSL
OpenSSL Security Releases - June 2024
openssl-2024-06 Jun 1, 2024 Source: Vendor
OpenSSL security advisories for June 2024, compiled from CVE.org records.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.cve.org/CVERecord?id=CVE-2024-5535
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
2 lines
Showing 1–2 of 2
CVE-2024-5535
BR2024-0000-031857
OpenSSL
unclaimed
Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an
empty supported client protocols buffer may cause a crash or memory contents to
be sent to the peer.
Impact summary: A...
Credited as Joseph Birr-Pixton
CVE-2024-5535
BR2024-0000-031858
OpenSSL
unclaimed
Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an
empty supported client protocols buffer may cause a crash or memory contents to
be sent to the peer.
Impact summary: A...
Credited as David Benjamin (Google)