Denial of service in OpenSSL

1) Out-of-bounds write

EUVDB-ID: #VU98757

Risk: Low

CVSSv4.0: 4.6 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-9143

CWE-ID: CWE-787 - Out-of-bounds write

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error when using the low-level GF(2^m) elliptic curve APIs with untrusted explicit values for the field polynomial. A remote attacker can send specially crafted input to the server, trigger an out-of-bounds write and perform a denial of service (DoS) attack.

Note, the vulnerability can be exploited against the application in rare cases only that involve "exotic" curve encoding.

Mitigation

Install update from vendor's website.

Vulnerable software versions

OpenSSL: 1.0.2 - 3.3.2

CPE2.3

• cpe:2.3:a:openssl_software_foundation:openssl:1.0.2:*:*:*:*:*:*:*
• cpe:2.3:a:openssl_software_foundation:openssl:1.0.2zd:*:*:*:*:*:*:*
• cpe:2.3:a:openssl_software_foundation:openssl:1.0.2v:*:*:*:*:*:*:*
• cpe:2.3:a:openssl_software_foundation:openssl:1.0.2w:*:*:*:*:*:*:*
• cpe:2.3:a:openssl_software_foundation:openssl:1.0.2x:*:*:*:*:*:*:*
• cpe:2.3:a:openssl_software_foundation:openssl:1.0.2za:*:*:*:*:*:*:*
• cpe:2.3:a:openssl_software_foundation:openssl:1.0.2zb:*:*:*:*:*:*:*
• cpe:2.3:a:openssl_software_foundation:openssl:1.0.2zc:*:*:*:*:*:*:*
• cpe:2.3:a:openssl_software_foundation:openssl:1.0.2ze:*:*:*:*:*:*:*
• cpe:2.3:a:openssl_software_foundation:openssl:1.0.2t:*:*:*:*:*:*:*

External links

https://openssl-library.org/news/secadv/20241016.txt
https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4
https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700
https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154
https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712
https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a
https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.