CVE catalog
CVE-2024-33617
Security update for qatengine, qatlib
This update for qatengine, qatlib fixes the following issues: Note that the 1.6.1 release included in 1.7.0 fixes the following vulnerabilities: * bsc#1233363 (CVE-2024-28885) * bsc#1233365 (CVE-2024-31074) * bsc#1233366 (CVE-2024-33617) Update to 1.7.0: * ipp-crypto name change to cryptography-primitives * QAT_SW GCM memory leak fix in cleanup function * Update limitation section in README for v1.7.0 release * Fix build with OPENSSL_NO_ENGINE * Fix for build issues with qatprovider in qatlib * Bug fixes and README updates to v1.7.0 * Remove qat_contig_mem driver support * Add support for building QAT Engine ENGINE and PROVIDER modules with QuicTLS 3.x libraries * Fix for DSA issue with openssl3.2 * Fix missing lower bounds check on index i * Enabled SW Fallback support for FBSD * Fix for segfault issue when SHIM config section is unavailable * Fix for Coverity & Resource leak * Fix for RSA failure with SVM enabled in openssl-3.2 * SM3 Memory Leak Issue Fix * Fix qatprovider lib name issue with system openssl Update to 1.6.0: * Fix issue with make depend for QAT_SW * QAT_HW GCM Memleak fix & bug fixes * QAT2.0 FreeBSD14 intree driver support * Fix OpenSSL 3.2 compatibility issues * Optimize hex dump logging * Clear job tlv on error * QAT_HW RSA Encrypt and Decrypt provider support * QAT_HW AES-CCM Provider support * Add ECDH keymgmt support for provider * Fix QAT_HW SM2 memory leak * Enable qaeMemFreeNonZeroNUMA() for qatlib * Fix polling issue for the process that doesn't have QAT_HW instance * Fix SHA3 qctx initialization issue & potential memleak * Fix compilation error in SM2 with qat_contig_mem * Update year in copyright information to 2024 Update to 1.5.0: * use new --enable-qat_insecure_algorithms to avoid regressions * improve support for SM{2,3,4} ciphers * improve SW fallback support * many bug fixes, refactorisations and documentation updates qatlib was updated to 24.09.0: * Improved performance scaling in multi-thread applications * Set core affinity mapping based on NUMA (libnuma now required for building) * bug fixes, see https://github.com/intel/qatlib#resolved-issues version update to 24.02.0: * Support DC NS (NoSession) APIs * Support Symmetric Crypto SM3 & SM4 * Support Asymmetric Crypto SM2 * Support DC CompressBound APIs * Bug Fixes. See Resolved section in README.md update to 23.11.0: * use new --enable-legacy-algorithms to avoid regressions * add support for data compression chaining (hash then compress) * add support for additional configuration profiles * add support DC NS (NoSession) APIs * add support DC CompressBound APIs * add Support for Chinese SM{2,3,4} ciphers * bump shared library major to 4 * refactoring, bug fixes and documentation updates
- Severity
- Medium · CVSS 5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 0.46% · Oct 27, 2026
Reported versions and fixes
Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.
Version impact has not been established. The original provider fields are retained below.
Provider details and historical evidence
Original provider fields
{
"package_releases": [],
"fixed_versions": [],
"distribution_packages": [
{
"name": "qatengine",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.7.0-150500.3.3.1"
}
]
}
],
"release": "linux enterprise high performance computing 15 sp5-espos",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.7.0-150500.3.3.1",
"provider_record_id": "SUSE-SU-2025:3943-1"
},
{
"name": "qatlib",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "24.09.0-150500.3.3.1"
}
]
}
],
"release": "linux enterprise high performance computing 15 sp5-espos",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "24.09.0-150500.3.3.1",
"provider_record_id": "SUSE-SU-2025:3943-1"
},
{
"name": "qatzip",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.1.0-150500.3.2.1"
}
]
}
],
"release": "linux enterprise high performance computing 15 sp5-espos",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.1.0-150500.3.2.1",
"provider_record_id": "SUSE-SU-2025:3943-1"
},
{
"name": "qatengine",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.7.0-150500.3.3.1"
}
]
}
],
"release": "linux enterprise high performance computing 15 sp5-ltss",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.7.0-150500.3.3.1",
"provider_record_id": "SUSE-SU-2025:3943-1"
},
{
"name": "qatlib",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "24.09.0-150500.3.3.1"
}
]
}
],
"release": "linux enterprise high performance computing 15 sp5-ltss",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "24.09.0-150500.3.3.1",
"provider_record_id": "SUSE-SU-2025:3943-1"
},
{
"name": "qatzip",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.1.0-150500.3.2.1"
}
]
}
],
"release": "linux enterprise high performance computing 15 sp5-ltss",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.1.0-150500.3.2.1",
"provider_record_id": "SUSE-SU-2025:3943-1"
},
{
"name": "qatengine",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.7.0-150500.3.3.1"
}
]
}
],
"release": "linux enterprise server 15 sp5-ltss",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.7.0-150500.3.3.1",
"provider_record_id": "SUSE-SU-2025:3943-1"
},
{
"name": "qatlib",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "24.09.0-150500.3.3.1"
}
]
}
],
"release": "linux enterprise server 15 sp5-ltss",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "24.09.0-150500.3.3.1",
"provider_record_id": "SUSE-SU-2025:3943-1"
},
{
"name": "qatzip",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.1.0-150500.3.2.1"
}
]
}
],
"release": "linux enterprise server 15 sp5-ltss",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.1.0-150500.3.2.1",
"provider_record_id": "SUSE-SU-2025:3943-1"
},
{
"name": "qatengine",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.7.0-150500.3.3.1"
}
]
}
],
"release": "linux enterprise server for sap applications 15 sp5",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.7.0-150500.3.3.1",
"provider_record_id": "SUSE-SU-2025:3943-1"
},
{
"name": "qatlib",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "24.09.0-150500.3.3.1"
}
]
}
],
"release": "linux enterprise server for sap applications 15 sp5",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "24.09.0-150500.3.3.1",
"provider_record_id": "SUSE-SU-2025:3943-1"
},
{
"name": "qatzip",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.1.0-150500.3.2.1"
}
]
}
],
"release": "linux enterprise server for sap applications 15 sp5",
"versions": [],
"ecosystem": "rpm",
"fixed_version": "1.1.0-150500.3.2.1",
"provider_record_id": "SUSE-SU-2025:3943-1"
}
]
}OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.
Observed: