Resource exhaustion in OpenSSL - CVE-2024-2511

Vulnerability identifier: #VU88211

CSH Severity: Medium

CVSS v4 BT: 4.6 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2024-2511

CWE-ID: CWE-400

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to unbounded memory growth when processing TLSv1.3 sessions. A remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.

Successful exploitation of the vulnerability requires that the non-default SSL_OP_NO_TICKET option is being used in TLSv1.3.

OpenSSL
Vostro 5620
XPS 13 Plus 9320
XPS 13 9315
XPS 13 9310 2-in-1
XPS 13 9310
XPS 13 9300
XPS 13 7390 2-in-1
XPS 13 7390
XPS 13 9305
Vostro 7620
Vostro 5890
XPS 13 9340
Vostro 5320
Vostro 3910
Vostro 3888
Vostro 3881
Vostro 3710
Vostro 3690
Vostro 3681
Vostro 3501
Vostro 3500
Vostro 3401
XPS 17 9730
Latitude 3140 2in1
Latitude 3140
Latitude 3120
Inspiron 7710 All-in-One
Inspiron 7700 All-In-One
Inspiron 5410 All-In-One
XPS 9320
XPS 9315 2-in-1
XPS 8960
XPS 8950
XPS 8940
Vostro 3400
XPS 17 9720
XPS 17 9710
XPS 17 9700
XPS 16 9640
XPS 15 9530
XPS 15 9520
XPS 15 9510
XPS 15 9500
XPS 15 7590
XPS 14 9440
Inspiron 3020 Desktop
Precision 7530
Inspiron 5401 AIO
Inspiron 5400/5401
Inspiron 3910
Inspiron 3891
Inspiron 3881
Inspiron 3880
Inspiron 3501
Inspiron 3030S
Inspiron 3030
Inspiron 3020 Small Desktop
Precision 7540
Inspiron 27 7730 All-in-One
Inspiron 27 7720 All-in-One
Inspiron 24 5430 All-in-One
Inspiron 24 5420 All-in-One
Inspiron 16 Plus 7640
Inspiron 16 Plus 7630
Inspiron 16 Plus 7620
Inspiron 16 7630 2-in-1
Inspiron 16 7620 2-in-1
Inspiron 16 5640
Precision 7780
Vostro 3030S
Vostro 3030
Vostro 3020 Tower Desktop
Vostro 3020 Small Desktop
Vostro 16 5640
Vostro 16 5630
Vostro 15 3520
Vostro 15 3510
Vostro 14 3440
Vostro 14 3420
Precision 7960 Tower
Latitude 3300
Precision 7770
Precision 7760
Precision 7750
Precision 7740
Precision 7730
Precision 7720
Precision 7680
Precision 7670
Precision 7560
Precision 7550
Latitude 7280
Latitude 7380
Latitude 7350 Detachable
Latitude 7350
Latitude 7340
Latitude 7330 Rugged Laptop
Latitude 7330
Latitude 7320 Detachable
Latitude 7320
Latitude 7310
Latitude 7300
Latitude 7290
Latitude 7390
Latitude 7230 Rugged Extreme
Latitude 7220 Rugged Extreme
Latitude 7212 Rugged Extreme Tablet
Latitude 7210 2-in-1
Latitude 7200 2-in-1
Latitude 7030 Rugged Extreme
Latitude 5591
Latitude 5590
Latitude 5580
Latitude 5550
Latitude 7490
Latitude 9510 2in1
Latitude 9450
Latitude 9440 2-in-1
Latitude 9430
Latitude 9420
Latitude 9410
Latitude 9330
Latitude 7650
Latitude 7640
Latitude 7530
Latitude 7520
Latitude 5540
Latitude 7480
Latitude 7450
Latitude 7440
Latitude 7430
Latitude 7424 Rugged Extreme
Latitude 7420
Latitude 7410
Latitude 7400 2-in-1
Latitude 7400
Latitude 7390 2-in-1
Latitude 3550
Latitude 5400
Latitude 5350
Latitude 5340
Latitude 5330
Latitude 5320
Latitude 5310 2-IN-1
Latitude 5310
Latitude 5300 2-IN-1
Latitude 5300
Latitude 5290 2-in-1
Latitude 5290
Latitude 5401
Latitude 3540
Latitude 3530
Latitude 3450
Latitude 3440
Latitude 3430
Latitude 3390 2-in-1
Latitude 3340
Latitude 3330
Latitude 3310 2-in-1
Latitude 3310
Latitude 5480
Latitude 5531
Latitude 5530
Latitude 5521
Latitude 5520
Latitude 5511
Latitude 5510
Latitude 5501
Latitude 5500
Latitude 5491
Latitude 5490
Latitude 5488
Inspiron 16 7640 2-in-1
Latitude 5450
Latitude 5440
Latitude 5431
Latitude 5430 Rugged Laptop
Latitude 5430
Latitude 5424 Rugged
Latitude 5421
Latitude 5420 Rugged
Latitude 5411
Latitude 5410
OptiPlex 7480 All-in-One
OptiPlex 7490 All-in-One
OptiPlex 7770 All-In-One
OptiPlex 7780 All-in-One
OptiPlex AIO 7420
OptiPlex Micro 7010 / OptiPlex Micro Plus 7010
OptiPlex Micro 7020
OptiPlex SFF 7020
OptiPlex Small Form Factor 7010 / OptiPlex Small Form Factor Plus 7010
OptiPlex 7470 All-In-One
OptiPlex Tower 7010 / OptiPlex Tower Plus 7010
OptiPlex Tower 7020
OptiPlex XE4 SFF
OptiPlex XE4 Tower
Precision 3260 XE Compact / Precision 3260 Compact
Precision 3280 CFF
Precision 3420 Tower
OptiPlex 5490 All-In-One
OptiPlex 3090 Ultra
OptiPlex 3280 All-in-One
OptiPlex 5000 Micro / OptiPlex 5000 Small Form Factor / OptiPlex 5000 Tower
OptiPlex 5070
OptiPlex 5080
OptiPlex 5090 Micro / OptiPlex 5090 Small Form Factor / OptiPlex 5090 Tower
OptiPlex 5270 All-In-One
OptiPlex 5400 All-In-One
OptiPlex 5480 All-In-One
Precision 3440
OptiPlex 7000 Micro / OptiPlex 7000 Small Form Factor / OptiPlex 7000 Tower / OptiPlex 7000 XE Micro
OptiPlex 7070 Ultra
OptiPlex 7080
OptiPlex 7090 Tower
Optiplex 7090 Ultra
Inspiron 16 5630
Precision 5530 2-in-1
Precision 3640
Precision 3650 Tower
Precision 3660
Precision 3680 Tower
Precision 3930 Rack
Precision 5470
Precision 5480
Precision 5490
Precision 5530
Precision 3620 Tower
Precision 5540
Precision 5550
Precision 5560
Precision 5570
Precision 5680
Precision 5750
Precision 5760
Precision 5770
Precision 5860 Tower
Precision 3551
Precision 3450
Precision 3460 XE Small Form Factor / Precision 3460 Small Form Factor
Precision 3470
Precision 3480
Precision 3490
Precision 3530
Precision 3540
Precision 3541
Precision 3550
OptiPlex 7400 All-In-One
Precision 3560
Precision 3561
Precision 3570
Precision 3571
Precision 3580
Precision 3581
Precision 3590
Precision 3591
Dell G15 5511
Dell Precision 5820 Tower
Dell Precision 3630 Tower
Dell Precision 3431 Tower
Dell Precision 3430 Tower
Dell G5 5000
OptiPlex 3090
Dell G16 7620
Dell G15 5530
Dell G15 5520
Dell Precision 7820 Tower
Dell G15 5510
ChengMing 3991
ChengMing 3990
ChengMing 3910/3911
ChengMing 3900
AURORA R16
Alienware x17 R2
Alienware x17 R1
Inspiron 14 7420 2-in-1
Inspiron 16 5620
Inspiron 15 3520
Inspiron 15 3511
Inspiron 14 Plus 7440
Inspiron 14 Plus 7430
Inspiron 14 Plus 7420
Inspiron 14 7440 2-in-1
Inspiron 14 7430 2-in-1
Dell G16 7630
Inspiron 14 5440
Inspiron 14 5430
Inspiron 14 5420
Inspiron 13 5330
Inspiron 13 5320
Pro Rugged 14 RB14250
Pro Rugged 13 RA13250
Dell Precision 7920 Tower
Alienware m15 R3
Precision 7520
Alienware x14
Alienware M18 R2
Alienware m18 R1
Alienware m17 R4
Alienware m17 R3
Alienware m16 R2
Alienware m16 R1
Alienware m15 R7
Alienware m15 R6
Alienware m15 R4
Alienware x16 R1
Alienware Aurora R15
Alienware Aurora R13
Alienware Aurora R12
Alienware Area 51m R2
Latitude 9520
Latitude Rugged 7220EX
OptiPlex 3000 Micro / OptiPlex 3000 Small Form Factor / OptiPlex 3000 Tower
OptiPlex 3050 All-In-One
OptiPlex 3070
OptiPlex 3080
Alienware x16 R2
Alienware x15 R2
Alienware x15 R1
Alienware x14 R2
LANTIME Operating System Firmware (LTOS)
PowerProtect Cyber Recovery
OptiPlex 5055 Ryzen CPU
OptiPlex 5055 Ryzen APU
OptiPlex 5055 A-Serial
Latitude 5495
OptiPlex All-in-One 7410
Vostro 7500
Inspiron 7501
Inspiron 7500
Latitude 3510
Latitude 3410
Inspiron 7706 2-in-1
Latitude 3301
Inspiron 7506 2-in-1
Inspiron 7306 2-in-1
Inspiron 5509
Inspiron 5502
Inspiron 5402
Inspiron 5406 2-in-1
Inspiron 5409
Vostro 5402
Vostro 5502
Latitude 3500
Latitude 3400
Inspiron 7300
Inspiron 5301
Inspiron 7400
Vostro 5301
Oracle Solaris
Amazon Linux AMI
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Software Development Kit 12
BIG-IP Next CNF
BIG-IP Next SPK
SUSE Manager Server
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
openSUSE Leap Micro
IBM i
SUSE Enterprise Storage
IBM AIX
Fedora
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Cisco NX-OS
Slackware Linux
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Linux Enterprise Server 15 SP4 LTSS
SUSE Linux Enterprise Desktop 15 SP4 LTSS
Basesystem Module
openSUSE Leap
openEuler
Ubuntu
Junos OS
Anolis OS
OptiPlex XE3
Precision 3240 Compact
OptiPlex 7070
OptiPlex 7071
Consul
IBM Concert Software
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
Splunk Add-on for Microsoft Cloud Services
WebSphere Remote Server
IBM Rational ClearQuest
Oracle HTTP Server
Service Interconnect
Red Hat Advanced Cluster Management for Kubernetes
APEX Cloud Platform for Red Hat OpenShift
Red Hat OpenShift Dev Spaces
IBM Tivoli Netcool System Service Monitors/Application Service Monitors
OpenShift Logging
Dell Secure Connect Gateway
IBM Rational Build Forge
IBM MQ for HPE NonStop
IBM MQ
IBM Rational ClearCase
IBM QRadar WinCollect Agent
Voice Gateway
Rapid Infrastructure Automation
Guardium Data Security Center (GDSC)
webMethods Managed File Transfer
HP-UX OpenSSL
Virtualization Management Interface
APEX Cloud Platform for Microsoft Azure
Sterling Connect:Express for UNIX
PowerStore X
Storage Resource Manager
Storage Protect for Virtual Environments: Data Protection for Hyper-V
Storage Protect Client
Storage Protect for Space Management
Storage Protect for Virtual Environments: Data Protection for VMware
IBM MQ Appliance
CloudBoost Virtual Appliance
Robotic Process Automation for Cloud Pak
IBM VIOS
Traffix SDC
IBM DataPower Gateway
IBM Storage Scale System
Oracle Banking Virtual Account Management
Oracle Banking Liquidity Management
Orion Platform
openssl-1_1-debugsource
libopenssl-1_1-devel
openssl-1_1-debuginfo
libopenssl-1_1-devel-32bit
openssl-1_1
libopenssl1_1-debuginfo
libopenssl1_1
libopenssl1_1-hmac
libopenssl1_1-hmac-32bit
libopenssl1_1-32bit
libopenssl1_1-debuginfo-32bit
openssl-1_1-doc
libopenssl1_1-32bit-debuginfo
openssl-devel
openssl
openssl-debugsource
openssl-debuginfo
openssl-libs
openssl-help
libopenssl1_1-hmac-64bit
libopenssl1_1-64bit
libopenssl1_1-64bit-debuginfo
libopenssl-1_1-devel-64bit
openssl-solibs
libssl1.1 (Ubuntu package)
libssl3 (Ubuntu package)
openssl-fips-provider (Red Hat package)
libopenssl3-debuginfo
openssl-3
libopenssl-3-devel
openssl-3-debuginfo
libopenssl3
openssl-3-debugsource
libopenssl-3-devel-32bit
libopenssl3-32bit
libopenssl3-32bit-debuginfo
openssl-3-doc
libopenssl3-64bit
libopenssl-3-devel-64bit
libopenssl3-64bit-debuginfo
openssl-perl
openssl-doc
libssl3t64 (Ubuntu package)
openssl (Red Hat package)
openssl3
edk2 (Ubuntu package)
edk2-devel
edk2
edk2-debuginfo
edk2-debugsource
edk2-help
edk2-aarch64
python3-edk2-devel
edk2-ovmf
OpenShift API for Data Protection (OADP)
Multicluster Engine for Kubernetes
OpenShift Virtualization
OpenShift Data Foundation (formerly OpenShift Container Storage)
IBM MaaS360 VPN Module
Dell EMC Storage Monitoring and Reporting (SMR)
Dell EMC VxRail Appliance
IBM CICS TX Advanced
IBM App Connect Enterprise
Intel Management Engine Interface Driver
Intel Management Engine Components Installer

Install update from vendor's website.

OpenSSL - addressed in versions 1.1.1y, 3.0.14, 3.1.6, 3.2.2, 3.3.1
Vostro 5620 - update to 1.26.0
XPS 13 9315 - update to 1.26.0
XPS 13 9310 2-in-1 - update to 2.29.1
XPS 13 9310 - update to 3.27.1
XPS 13 9300 - update to 1.27.1
XPS 13 7390 2-in-1 - update to 1.34.1
Oracle Solaris - update to 11.4 SRU 71
XPS 13 7390 - update to 1.28.1
XPS 13 9305 - update to 1.26.1
Vostro 3910 - update to 1.28.0
Vostro 3710 - update to 1.28.0
Vostro 3501 - update to 1.35.0
Vostro 3500 - update to 1.34.0
Vostro 3401 - update to 1.35.0
XPS 8940 - update to 2.25.0
Vostro 3400 - update to 1.34.0
XPS 17 9700 - update to 1.33.1
XPS 15 9500 - update to 1.33.1
Inspiron 3910 - update to 1.28.0
Inspiron 3501 - update to 1.35.0
Inspiron 3030S - update to 1.12.0
Inspiron 3030 - update to 1.12.0
Inspiron 27 7730 All-in-One - update to 1.9.0
Inspiron 27 7720 All-in-One - update to 1.16.1
Inspiron 24 5430 All-in-One - update to 1.9.0
Inspiron 24 5420 All-in-One - update to 1.16.1
Inspiron 16 Plus 7640 - update to 1.12.0
Inspiron 16 7630 2-in-1 - update to 1.19.0
Vostro 3030S - update to 1.12.0
Vostro 3030 - update to 1.12.0
Vostro 3020 Tower Desktop - update to 1.22.0
Vostro 3020 Small Desktop - update to 1.22.0
Vostro 16 5630 - update to 1.19.0
Vostro 15 3510 - update to 1.34.0
Vostro 14 3440 - update to 1.10.0
Latitude 7220 Rugged Extreme - update to 1.42.0
Latitude 3550 - update to 1.10.0
Latitude 3450 - update to 1.10.0
Inspiron 16 7640 2-in-1 - update to 1.9.0
OptiPlex AIO 7420 - update to 1.12.1
Precision 3260 XE Compact / Precision 3260 Compact - update to 3.12.0
Precision 3280 CFF - update to 1.10.0
Inspiron 16 5630 - update to 1.19.0
Precision 3660 - update to 2.22.0
Precision 3680 Tower - update to 1.11.1
Precision 5550 - update to 1.33.1
Precision 5750 - update to 1.33.1
Precision 3460 XE Small Form Factor / Precision 3460 Small Form Factor - update to 3.12.0
Dell G15 5511 - update to 1.34.0
Dell G15 5510 - update to 1.30.0
ChengMing 3910/3911 - update to 1.22.0
ChengMing 3900 - update to 1.28.0
Inspiron 16 5620 - update to 1.26.0
Inspiron 15 3511 - update to 1.34.0
Inspiron 14 Plus 7440 - update to 1.12.0
Inspiron 14 7440 2-in-1 - update to 1.10.0
Inspiron 14 7430 2-in-1 - update to 1.19.0
Inspiron 14 5440 - update to 1.10.0
Inspiron 14 5430 - update to 1.19.0
Inspiron 14 5420 - update to 1.26.0
Alienware m16 R2 - update to 1.9.0
Latitude Rugged 7220EX - update to 1.42.0
Consul - update to 1.20.2
IBM Concert Software - update to 1.0.5
Voice Gateway - update to 1.0.8.12
Rapid Infrastructure Automation - update to 1.1.5.3
Guardium Data Security Center (GDSC) - update to 3.6.1
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 5.2.0
Splunk Add-on for Microsoft Cloud Services - update to 5.4.3
IBM Storage Scale System - addressed in versions 6.2.3.3, 7.0.0.0
LANTIME Operating System Firmware (LTOS) - update to 7.08.012
IBM Rational ClearQuest - addressed in versions 9.1.0.8, 10.0.7
Cisco NX-OS - update to 9.4(2)
PowerProtect Cyber Recovery - update to 19.18.0.2
Junos OS - addressed in versions 21.4R3-S8, 21.4R3-S9, 22.2R3-S5, 22.3R3-S4, 22.4R3-S3, 23.2R2-S2, 23.4R2-S1, 24.2R1-S1, 24.2R2, 24.4R1
Orion Platform - update to 2024.4
HP-UX OpenSSL - update to A.03.00.15.001
Virtualization Management Interface - addressed in versions FW1060.31, FW1060.40
Service Interconnect - addressed in versions 1, 1.4
openssl-1_1-debugsource - addressed in versions 1.1.1d-2.110.2, 1.1.1d-150200.11.88.1, 1.1.1l-150400.7.66.2, 1.1.1l-150500.17.28.2
libopenssl-1_1-devel - addressed in versions 1.1.1d-2.110.2, 1.1.1d-150200.11.88.1, 1.1.1l-150400.7.66.2, 1.1.1l-150500.17.28.2
openssl-1_1-debuginfo - addressed in versions 1.1.1d-2.110.2, 1.1.1d-150200.11.88.1, 1.1.1l-150400.7.66.2, 1.1.1l-150500.17.28.2
libopenssl-1_1-devel-32bit - addressed in versions 1.1.1d-2.110.2, 1.1.1d-150200.11.88.1, 1.1.1l-150400.7.66.2, 1.1.1l-150500.17.28.2
openssl-1_1 - addressed in versions 1.1.1d-2.110.2, 1.1.1d-150200.11.88.1, 1.1.1l-150400.7.66.2, 1.1.1l-150500.17.28.2
libopenssl1_1-debuginfo - addressed in versions 1.1.1d-2.110.2, 1.1.1d-150200.11.88.1, 1.1.1l-150400.7.66.2, 1.1.1l-150500.17.28.2
libopenssl1_1 - addressed in versions 1.1.1d-2.110.2, 1.1.1d-150200.11.88.1, 1.1.1l-150400.7.66.2, 1.1.1l-150500.17.28.2
libopenssl1_1-hmac - addressed in versions 1.1.1d-2.110.2, 1.1.1d-150200.11.88.1, 1.1.1l-150400.7.66.2, 1.1.1l-150500.17.28.2
libopenssl1_1-hmac-32bit - addressed in versions 1.1.1d-2.110.2, 1.1.1d-150200.11.88.1, 1.1.1l-150400.7.66.2, 1.1.1l-150500.17.28.2
libopenssl1_1-32bit - addressed in versions 1.1.1d-2.110.2, 1.1.1d-150200.11.88.1, 1.1.1l-150400.7.66.2, 1.1.1l-150500.17.28.2
libopenssl1_1-debuginfo-32bit - update to 1.1.1d-2.110.2
openssl-1_1-doc - addressed in versions 1.1.1d-150200.11.88.1, 1.1.1l-150400.7.66.2, 1.1.1l-150500.17.28.2
libopenssl1_1-32bit-debuginfo - addressed in versions 1.1.1d-150200.11.88.1, 1.1.1l-150400.7.66.2, 1.1.1l-150500.17.28.2
openssl-devel - update to 1.1.1f-33
openssl - update to 1.1.1f-33
openssl-debugsource - update to 1.1.1f-33
openssl-debuginfo - update to 1.1.1f-33
openssl-libs - update to 1.1.1f-33
openssl-help - update to 1.1.1f-33
libopenssl1_1-hmac-64bit - addressed in versions 1.1.1l-150400.7.66.2, 1.1.1l-150500.17.28.2
libopenssl1_1-64bit - addressed in versions 1.1.1l-150400.7.66.2, 1.1.1l-150500.17.28.2
libopenssl1_1-64bit-debuginfo - addressed in versions 1.1.1l-150400.7.66.2, 1.1.1l-150500.17.28.2
libopenssl-1_1-devel-64bit - addressed in versions 1.1.1l-150400.7.66.2, 1.1.1l-150500.17.28.2
openssl-solibs - update to 1.1.1za
openssl - update to 1.1.1za
libssl1.1 (Ubuntu package) - update to 1.1.1f-1ubuntu2.23
OpenShift API for Data Protection (OADP) - addressed in versions 1.3.4, 1.4.2
APEX Cloud Platform for Microsoft Azure - update to 01.04.01.00
Sterling Connect:Express for UNIX - update to 1.5.0.1700
OptiPlex 5055 Ryzen CPU - update to 1.14.0
OptiPlex 5055 Ryzen APU - update to 1.14.0
OptiPlex 5055 A-Serial - update to 1.14.0
Latitude 5495 - update to 1.17.0
OptiPlex All-in-One 7410 - update to 1.22.0
Vostro 7500 - update to 1.31.1
Inspiron 7501 - update to 1.31.1
Inspiron 7500 - update to 1.31.1
Latitude 3510 - update to 1.32.1
Latitude 3410 - update to 1.32.1
Inspiron 7706 2-in-1 - update to 1.33.1
Latitude 3301 - update to 1.33.1
Inspiron 7506 2-in-1 - update to 1.33.1
Inspiron 7306 2-in-1 - update to 1.33.1
Inspiron 5509 - update to 1.33.1
Inspiron 5502 - update to 1.33.1
Inspiron 5402 - update to 1.33.1
Inspiron 5406 2-in-1 - update to 1.33.1
Inspiron 5409 - update to 1.33.1
Vostro 5402 - update to 1.33.1
Vostro 5502 - update to 1.33.1
Latitude 3500 - update to 1.35.1
Latitude 3400 - update to 1.35.1
Inspiron 7300 - update to 1.36.1
Inspiron 5301 - update to 1.36.1
Inspiron 7400 - update to 1.36.1
Vostro 5301 - update to 1.36.1
Multicluster Engine for Kubernetes - addressed in versions 2.5.8, 2.6.4, 2.7.4
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.10.7, 2.11.4, 2.11.7, 2.12.1, 2.12.3
libssl3 (Ubuntu package) - update to 3.0.2-0ubuntu1.17
openssl-fips-provider (Red Hat package) - update to 3.0.7-6.el9_5
openssl - update to 3.0.8-1
libopenssl3-debuginfo - addressed in versions 3.0.8-150400.4.54.1, 3.0.8-150500.5.30.1
openssl-3 - addressed in versions 3.0.8-150400.4.54.1, 3.0.8-150500.5.30.1
libopenssl-3-devel - addressed in versions 3.0.8-150400.4.54.1, 3.0.8-150500.5.30.1
openssl-3-debuginfo - addressed in versions 3.0.8-150400.4.54.1, 3.0.8-150500.5.30.1
libopenssl3 - addressed in versions 3.0.8-150400.4.54.1, 3.0.8-150500.5.30.1
openssl-3-debugsource - addressed in versions 3.0.8-150400.4.54.1, 3.0.8-150500.5.30.1
libopenssl-3-devel-32bit - addressed in versions 3.0.8-150400.4.54.1, 3.0.8-150500.5.30.1
libopenssl3-32bit - addressed in versions 3.0.8-150400.4.54.1, 3.0.8-150500.5.30.1
libopenssl3-32bit-debuginfo - addressed in versions 3.0.8-150400.4.54.1, 3.0.8-150500.5.30.1
openssl-3-doc - addressed in versions 3.0.8-150400.4.54.1, 3.0.8-150500.5.30.1
libopenssl3-64bit - addressed in versions 3.0.8-150400.4.54.1, 3.0.8-150500.5.30.1
libopenssl-3-devel-64bit - addressed in versions 3.0.8-150400.4.54.1, 3.0.8-150500.5.30.1
libopenssl3-64bit-debuginfo - addressed in versions 3.0.8-150400.4.54.1, 3.0.8-150500.5.30.1
openssl-perl - update to 3.0.12-7
openssl - update to 3.0.12-7
openssl-devel - update to 3.0.12-7
openssl-doc - update to 3.0.12-7
openssl-libs - update to 3.0.12-7
libssl3t64 (Ubuntu package) - update to 3.0.13-0ubuntu3.2
IBM MaaS360 VPN Module - update to 3.000.850
PowerStore X - update to 3.2.1.4-2386214
openssl (Red Hat package) - update to 3.2.2-6.el9_5
openssl3 - update to 3.2.2-7.1.el8
APEX Cloud Platform for Red Hat OpenShift - update to 03.04.01.00
Red Hat OpenShift Dev Spaces - update to 3.17.0
IBM Tivoli Netcool System Service Monitors/Application Service Monitors - update to 4.0.1 SP13
OpenShift Virtualization - update to 4.13.11
OpenShift Data Foundation (formerly OpenShift Container Storage) - addressed in versions 4.14.13, 4.15.9, 4.16.4, 4.17.1
Storage Resource Manager - addressed in versions 5.0.1.0, 5.0.2.2
Dell EMC Storage Monitoring and Reporting (SMR) - addressed in versions 5.0.1.0, 5.0.2.2
OpenShift Logging - addressed in versions 5.8.16, 5.8.17, 5.8.19, 5.8.20, 5.9.10, 5.9.14
Dell Secure Connect Gateway - update to 5.24.00.14
IBM Rational Build Forge - update to 8.0.0.27
Dell EMC VxRail Appliance - update to 8.0.213
IBM MQ for HPE NonStop - update to 8.1.0.25
Storage Protect for Virtual Environments: Data Protection for Hyper-V - update to 8.2.1
Storage Protect Client - update to 8.2.1
Storage Protect for Space Management - update to 8.2.1
Storage Protect for Virtual Environments: Data Protection for VMware - update to 8.2.1
IBM MQ - addressed in versions 9.0.0.27, 9.1.0.23, 9.2.0.27, 9.3.0.21, 9.4.0.5
IBM Rational ClearCase - addressed in versions 9.1.0.8, 10.0.1.3, 11.0.0.3
IBM MQ Appliance - addressed in versions 9.3.0.20, 9.3.5.2
IBM CICS TX Advanced - update to 10.1.0.0 ifix32
IBM QRadar WinCollect Agent - update to 10.1.11
IBM DataPower Gateway - addressed in versions 10.5.0.12, 10.6.0.0
IBM App Connect Enterprise - update to 12.0.12.6
CloudBoost Virtual Appliance - update to 19.12.0.1
Robotic Process Automation for Cloud Pak - addressed in versions 21.0.7.19, 23.0.19
edk2 (Ubuntu package) - addressed in versions 2022.02-3ubuntu0.22.04.4, 2022.02-3ubuntu0.22.04.5, 2024.02-2ubuntu0.6, 2024.02-2ubuntu0.7, 2025.02-3ubuntu2.2
Intel Management Engine Interface Driver - addressed in versions 2413.5.68.0, 2435.6.36.0
Intel Management Engine Components Installer - update to 2435.6.36.0
edk2-devel - update to 202002-21
edk2 - update to 202002-21
edk2-debuginfo - update to 202002-21
edk2-debugsource - update to 202002-21
edk2-help - update to 202002-21
edk2-aarch64 - update to 202002-21
python3-edk2-devel - update to 202002-21
edk2-ovmf - update to 202002-21

• https://www.openssl.org/news/secadv/20240408.txt

• Denial of service in OpenSSL
• openEuler update for edk2
• openEuler update for openssl
• SUSE update for openssl-1_1
• SUSE update for openssl-3
• SUSE update for openssl-1_1
• SUSE update for openssl-3
• SUSE update for openssl-1_1
• Multiple vulnerabilities in Dell Secure Connect Gateway
• Resource exhaustion in IBM MQ Appliance
• Slackware Linux update for openssl
• Multiple vulnerabilities in Oracle Banking Virtual Account Management
• Multiple vulnerabilities in Dell EMC VxRail Appliance
• Multiple vulnerabilities in Dell Storage Resource Manager (SRM) and Dell Storage Monitoring and Reporting (SMR)
• Ubuntu update for openssl
• Multiple vulnerabilities in IBM MaaS360 VPN Module
• Amazon Linux AMI update for openssl
• Multiple vulnerabilities in IBM QRadar WinCollect Agent
• Resource exhaustion in IBM DataPower Gateway
• SUSE update for openssl-1_1
• Resource exhaustion in IBM Sterling Connect:Express for UNIX
• Multiple vulnerabilities in IBM AIX
• Multiple vulnerabilities in IBM VIOS
• Oracle Solaris update for thrid-party components
• Resource exhaustion in IBM MQ
• Resource exhaustion in IBM MQ for HPE NonStop
• Multiple vulnerabilities in IBM WebSphere Remote Server
• Resource exhaustion in IBM Tivoli Netcool System Service Monitors/Application Service Monitors
• Resource exhaustion in IBM App Connect Enterprise
• Junos OS update for OpenSSL
• Multiple vulnerabilities in IBM Rational Build Forge
• Multiple vulnerabilities in Oracle HTTP Server
• Multiple vulnerabilities in Oracle Banking Liquidity Management
• Multiple vulnerabilities in SolarWinds Orion Platform
• Multiple vulnerabilities in Dell PowerStore X
• Denial of service in BIG-IP Next SPK/CNF OpenSSL
• Denial of service in F5 Traffix SDC OpenSSL
• Red Hat Enterprise Linux 9 update for openssl and openssl-fips-provider
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.3
• Multiple vulnerabilities in Service Interconnect 1
• Multiple vulnerabilities in Red Hat OpenShift Dev Spaces 3.17
• Multiple vulnerabilities in OpenShift Virtualization 4.13
• Multiple vulnerabilities in IBM Robotic Process Automation for Cloud Pak
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.12
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) 4.17
• Multiple vulnerabilities in Service Interconnect
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) 4.16
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.6
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.11
• Hashicorp Consul update for third-party components
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) 4.15
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) 4.14
• Multiple vulnerabilities in OpenShift Logging 5.8
• Multiple vulnerabilities in OpenShift Logging 5.9
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.5
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.10
• Multiple vulnerabilities in Guardium Data Security Center
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.4
• Multiple vulnerabilities in HP-UX Using OpenSSL
• Multiple vulnerabilities in OpenShift Logging 5.8
• Multiple vulnerabilities in IBM CICS TX Advanced
• Fedora EPEL 8 update for openssl3
• Multiple vulnerabilities in IBM Rational ClearCase
• Multiple vulnerabilities in IBM Rational ClearQuest
• Cisco NX-OS Firmware update for OpenSSL
• Multiple vulnerabilities in IBM Concert Software
• Anolis OS update for openssl
• Multiple vulnerabilities in OpenShift Logging 5.8
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.7
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.12
• Multiple vulnerabilities in IBM webMethods Managed File Transfer
• Splunk Add-on for Microsoft Cloud Services update for cryptography
• Dell APEX Cloud Platform for Microsoft Azure update for third-party components
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.11
• Multiple vulnerabilities in OpenShift Logging 5.8
• Multiple vulnerabilities in OpenShift Logging 5.9
• Multiple vulnerabilities in Meinberg LANTIME firmware (July 2024)
• Virtualization Management Interface update for OpenSSL
• Dell APEX Cloud Platform for Red Hat OpenShift update for third-party components
• Multiple vulnerabilities in IBM Voice Gateway
• Dell Client Platform BIOS update for OpenSSL
• Dell Client Platform update for OpenSSL
• Multiple vulnerabilities in Dell PowerProtect Cyber Recovery
• Multiple vulnerabilities in Dell Storage Resource Manager (SRM) and Dell Storage Monitoring and Reporting (SMR)
• Dell CloudBoost Virtual Appliance update for third-party components
• Multiple vulnerabilities in IBM Rapid Infrastructure Automation
• Multiple vulnerabilities in IBM Watson Speech Services Cartridge
• Multiple vulnerabilities in IBM i
• Ubuntu update for edk2
• Ubuntu update for edk2
• Multiple vulnerabilities in IBM Storage Scale System
• Multiple vulnerabilities in IBM Storage Protect Backup-Archive Client, IBM Storage Protect for Virtual Environments and IBM Storage Protect for Space Management