CVE catalog

CVE-2024-4741

EDK II vulnerabilities

[CVE catalog]

Severity
High · CVSS 8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
2.93% · Oct 25, 2026

Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause memory to be accessed that was previously freed in some situations Impact summary: A use after free can have a range of potential consequences such as the corruption of valid data, crashes or execution of arbitrary code. However, only applications that directly call the SSL_free_buffers function are affected by this issue. Applications that do not call this function are not vulnerable. Our investigations indicate that this function is rarely used by applications. The SSL_free_buffers function is used to free the internal OpenSSL buffer used when processing an incoming record from the network. The call is only expected to succeed if the buffer is not currently in use. However, two scenarios have been identified where the buffer is freed even when still in use. The first scenario occurs where a record header has been received from the network and processed by OpenSSL, but the full record body has not yet arrived. In this case calling SSL_free_buffers will succeed even though a record has only been partially processed and the buffer is still in use. The second scenario occurs where a full record containing application data has been received and processed by OpenSSL but the application has only read part of this data. Again a call to SSL_free_buffers will succeed even though the buffer is still in use. While these scenarios could occur accidentally during normal operation a malicious attacker could attempt to engineer a stituation where this occurs. We are not aware of this issue being actively exploited. The FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianopensslsid3.6.5-1fixed
Debianopensslforky3.6.5-1fixed
Debianopenssltrixie3.5.7-1~deb13u2fixed
Debianopenssltrixie-security3.5.7-1~deb13u3fixed
Debianopensslbookworm3.0.20-1~deb12u2fixed
Debianopensslbookworm-security3.0.22-1~deb12u2fixed
Ubuntuopensslnoble3.0.14-1~deb12u1fixed
Ubuntuedk2noble2024.02-2ubuntu0.6fixed
Ubuntuefi-shell-aa64noble2024.02-2ubuntu0.6fixed
Ubuntuefi-shell-armnoble2024.02-2ubuntu0.6fixed
Ubuntuefi-shell-ia32noble2024.02-2ubuntu0.6fixed
Ubuntuefi-shell-riscv64noble2024.02-2ubuntu0.6fixed
Ubuntuefi-shell-x64noble2024.02-2ubuntu0.6fixed
Ubuntuovmfnoble2024.02-2ubuntu0.6fixed
Ubuntuovmf-ia32noble2024.02-2ubuntu0.6fixed
Ubuntuqemu-efi-aarch64noble2024.02-2ubuntu0.6fixed
Ubuntuqemu-efi-armnoble2024.02-2ubuntu0.6fixed
Ubuntuqemu-efi-riscv64noble2024.02-2ubuntu0.6fixed
Ubuntuopensslnoble3.0.13-0ubuntu3.2fixed
Ubuntulibssl-devnoble3.0.13-0ubuntu3.2fixed
Ubuntulibssl-docnoble3.0.13-0ubuntu3.2fixed
Ubuntulibssl3t64noble3.0.13-0ubuntu3.2fixed
Ubuntuopensslpro3.0.2-0ubuntu1.10+Fips1vulnerable
Ubuntuopensslpro3.0.2-0ubuntu1.12+Fips1vulnerable
Ubuntuopensslpro3.0.2-0ubuntu1.14+Fips1vulnerable
Ubuntuopensslpro3.0.2-0ubuntu1.15+Fips1vulnerable
Ubuntuopensslpro3.0.2-0ubuntu1.16+Fips1vulnerable
Ubuntuopensslpro3.0.2-0ubuntu1.17+Fips1fixed
Ubuntuedk2pro0~20190606.20d2e5a1-2ubuntu1vulnerable
Ubuntuedk2pro0~20190828.37eef910-3vulnerable
Ubuntuedk2pro0~20190828.37eef910-4vulnerable
Ubuntuedk2pro0~20191122.bd85bf54-1vulnerable
Ubuntuedk2pro0~20191122.bd85bf54-1ubuntu1vulnerable
Ubuntuedk2pro0~20191122.bd85bf54-2vulnerable
Ubuntuedk2pro0~20191122.bd85bf54-2ubuntu1vulnerable
Ubuntuedk2pro0~20191122.bd85bf54-2ubuntu2vulnerable
Ubuntuedk2pro0~20191122.bd85bf54-2ubuntu3vulnerable
Ubuntuedk2pro0~20191122.bd85bf54-2ubuntu3.1vulnerable
Ubuntuedk2pro0~20191122.bd85bf54-2ubuntu3.2vulnerable
Ubuntuedk2pro0~20191122.bd85bf54-2ubuntu3.3vulnerable
Ubuntuedk2pro0~20191122.bd85bf54-2ubuntu3.4vulnerable
Ubuntuedk2pro0~20191122.bd85bf54-2ubuntu3.5vulnerable
Ubuntuedk2pro0~20191122.bd85bf54-2ubuntu3.6vulnerable
Ubuntuedk2pro0~20191122.bd85bf54-2ubuntu3.6+esm1vulnerable
Ubuntunodejspro12.22.5~dfsg-5ubuntu1vulnerable
Ubuntunodejspro12.22.7~dfsg-2ubuntu1vulnerable
Ubuntunodejspro12.22.7~dfsg-2ubuntu3vulnerable
Ubuntunodejspro12.22.9~dfsg-1ubuntu2vulnerable
Ubuntunodejspro12.22.9~dfsg-1ubuntu3vulnerable
Ubuntunodejspro12.22.9~dfsg-1ubuntu3.1vulnerable
Ubuntunodejspro12.22.9~dfsg-1ubuntu3.2vulnerable
Ubuntunodejspro12.22.9~dfsg-1ubuntu3.3vulnerable
Ubuntunodejspro12.22.9~dfsg-1ubuntu3.4vulnerable
Ubuntunodejspro12.22.9~dfsg-1ubuntu3.5vulnerable
Ubuntunodejspro12.22.9~dfsg-1ubuntu3.6vulnerable
Ubuntunodejspro12.22.9~dfsg-1ubuntu3.6+esm2vulnerable
Ubuntuopenssl20.041.1.1c-1ubuntu4vulnerable
Ubuntuopenssl20.041.1.1d-2ubuntu3vulnerable
Ubuntuopenssl20.041.1.1d-2ubuntu6vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu1vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.1vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.2vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.3vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.4vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.5vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.8vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.9vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.10vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.11vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.12vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.13vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.15vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.16vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.17vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.18vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.19vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.20vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.21vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.22vulnerable
Ubuntuopenssl20.041.1.1f-1ubuntu2.23fixed
Ubuntuedk222.042021.08~rc0-2vulnerable
Ubuntuedk222.042021.08-3vulnerable
Ubuntuedk222.042021.11~rc1-1vulnerable
Ubuntuedk222.042021.11-1vulnerable
Ubuntuedk222.042021.11-2vulnerable
Ubuntuedk222.042022.02~rc1-1vulnerable
Ubuntuedk222.042022.02~rc1-1ubuntu1vulnerable
Ubuntuedk222.042022.02-1vulnerable
Ubuntuedk222.042022.02-2vulnerable
Ubuntuedk222.042022.02-3vulnerable
Ubuntuedk222.042022.02-3ubuntu0.22.04.1vulnerable
Ubuntuedk222.042022.02-3ubuntu0.22.04.2vulnerable
Ubuntuedk222.042022.02-3ubuntu0.22.04.3vulnerable
Ubuntuedk222.042022.02-3ubuntu0.22.04.4fixed
Ubuntuopenssl22.041.1.1l-1ubuntu1vulnerable
Ubuntuopenssl22.043.0.0-1ubuntu1vulnerable
Ubuntuopenssl22.043.0.1-0ubuntu1vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.1vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.2vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.4vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.5vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.6vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.7vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.8vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.9vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.10vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.12vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.13vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.14vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.15vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.16vulnerable
Ubuntuopenssl22.043.0.2-0ubuntu1.17fixed
Ubuntuopenssl-fipspro3.0.13-0ubuntu3+Fips1vulnerable
Ubuntuopenssl-fipspro3.0.13-0ubuntu3.6+Fips1fixed
Ubuntuedk224.042023.05-2vulnerable
Ubuntuedk224.042023.11-2vulnerable
Ubuntuedk224.042023.11-3vulnerable
Ubuntuedk224.042023.11-4vulnerable
Ubuntuedk224.042023.11-5vulnerable
Ubuntuedk224.042023.11-6vulnerable
Ubuntuedk224.042023.11-8vulnerable
Ubuntuedk224.042024.02-1vulnerable
Ubuntuedk224.042024.02-2vulnerable
Ubuntuedk224.042024.02-2ubuntu0.1vulnerable
Ubuntuedk224.042024.02-2ubuntu0.3vulnerable
Ubuntuedk224.042024.02-2ubuntu0.4vulnerable
Ubuntuedk224.042024.02-2ubuntu0.5vulnerable
Ubuntuedk224.042024.02-2ubuntu0.6fixed
Ubuntuopenssl24.043.0.10-1ubuntu2vulnerable
Ubuntuopenssl24.043.0.10-1ubuntu2.1vulnerable
Ubuntuopenssl24.043.0.10-1ubuntu3vulnerable
Ubuntuopenssl24.043.0.10-1ubuntu4vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu2vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3.1vulnerable
Ubuntuopenssl24.043.0.13-0ubuntu3.2fixed
Alpineopenssl3.173.0.14-r0fixed
Alpineopenssl3.183.1.6-r0fixed
Alpineopenssl3.193.1.6-r0fixed
Alpineopenssl3.203.3.0-r3fixed
Alpineopenssl3.213.3.0-r3fixed
Alpineopenssl3.223.3.0-r3fixed
Alpineopenssl3.233.3.0-r3fixed
Alpineopenssl3.243.3.0-r3fixed
Suseopenssl-1_1-livepatcheslinux enterprise live patching 15 sp60.5-150600.11.3.1fixed
Suseopenssl-1_1-livepatcheslinux enterprise live patching 15 sp40.4-150400.3.11.1fixed
Suseopenssl-1_1linux enterprise micro 5.51.1.1l-150500.17.31.1fixed
Suseopenssl-3linux enterprise micro 5.33.0.8-150400.4.57.1fixed
Suseopenssl-3linux enterprise micro 5.43.0.8-150400.4.57.1fixed
Suseopenssl-3linux enterprise high performance computing 15 sp4-espos3.0.8-150400.4.57.1fixed
Suseopenssl-3linux enterprise high performance computing 15 sp4-ltss3.0.8-150400.4.57.1fixed
Suseopenssl-3linux enterprise server 15 sp4-ltss3.0.8-150400.4.57.1fixed
Suseopenssl-3linux enterprise server for sap applications 15 sp43.0.8-150400.4.57.1fixed
Suseopenssl-3manager proxy 4.33.0.8-150400.4.57.1fixed
Suseopenssl-3manager server 4.33.0.8-150400.4.57.1fixed
Opensuseopenssl-3leap micro 5.33.0.8-150400.4.57.1fixed
Opensuseopenssl-3leap micro 5.43.0.8-150400.4.57.1fixed
Suseopenssl-1_1linux enterprise micro 5.31.1.1l-150400.7.69.1fixed
Suseopenssl-1_1linux enterprise micro 5.41.1.1l-150400.7.69.1fixed
Suseopenssl-1_1linux enterprise high performance computing 15 sp4-espos1.1.1l-150400.7.69.1fixed
Suseopenssl-1_1linux enterprise high performance computing 15 sp4-ltss1.1.1l-150400.7.69.1fixed
Suseopenssl-1_1linux enterprise server 15 sp4-ltss1.1.1l-150400.7.69.1fixed
Suseopenssl-1_1linux enterprise server for sap applications 15 sp41.1.1l-150400.7.69.1fixed
Suseopenssl-1_1manager proxy 4.31.1.1l-150400.7.69.1fixed
Suseopenssl-1_1manager server 4.31.1.1l-150400.7.69.1fixed
Opensuseopenssl-1_1leap micro 5.31.1.1l-150400.7.69.1fixed
Opensuseopenssl-1_1leap micro 5.41.1.1l-150400.7.69.1fixed
Suseopenssl-1_1linux enterprise software development kit 12 sp51.1.1d-2.107.1fixed
Suseopenssl-1_1linux enterprise server 12 sp51.1.1d-2.107.1fixed
Suseopenssl-1_1linux enterprise server for sap applications 12 sp51.1.1d-2.107.1fixed
Suseopenssl-1_1linux enterprise high performance computing 15 sp2-ltss1.1.1d-150200.11.91.1fixed
Suseopenssl-1_1linux enterprise high performance computing 15 sp3-ltss1.1.1d-150200.11.91.1fixed
Suseopenssl-1_1linux enterprise server 15 sp2-ltss1.1.1d-150200.11.91.1fixed
Suseopenssl-1_1linux enterprise server 15 sp3-ltss1.1.1d-150200.11.91.1fixed
Suseopenssl-1_1linux enterprise server for sap applications 15 sp21.1.1d-150200.11.91.1fixed
Suseopenssl-1_1linux enterprise server for sap applications 15 sp31.1.1d-150200.11.91.1fixed
Suseopenssl-1_1linux enterprise micro 5.11.1.1d-150200.11.91.1fixed
Suseopenssl-1_1linux enterprise micro 5.21.1.1d-150200.11.91.1fixed
Suseopenssl-1_1enterprise storage 7.11.1.1d-150200.11.91.1fixed
Opensuseopenssl-1_1tumbleweed1.1.1w-11.1fixed
Suseopenssl-3linux enterprise module for basesystem 15 sp53.0.8-150500.5.36.1fixed
Opensuseopenssl-3leap 15.53.0.8-150500.5.36.1fixed
Suseopenssl-1_1-livepatcheslinux enterprise live patching 15 sp50.4-150500.6.8.1fixed
Opensuseopenssl-3tumbleweed3.1.4-11.1fixed
Suseopenssl-1_1linux enterprise module for basesystem 15 sp61.1.1w-150600.5.3.1fixed
Suseopenssl-1_1linux enterprise module for development tools 15 sp61.1.1w-150600.5.3.1fixed
Suseopenssl-1_1linux enterprise module for legacy 15 sp61.1.1w-150600.5.3.1fixed
Opensuseopenssl-1_1leap 15.61.1.1w-150600.5.3.1fixed
Suseopenssl-1_1-livepatcheslinux enterprise live patching 15 sp70.5-150700.13.3.1fixed
Suseopenssl-1_1linux enterprise micro 5.51.1.1l-150500.17.31.1fixed
Suseopenssl-1_1linux enterprise module for basesystem 15 sp51.1.1l-150500.17.31.1fixed
Opensuseopenssl-1_1leap 15.51.1.1l-150500.17.31.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianopensslsourcesid3.2.2-1not yet assignedNot reported[1072113]
Debianopensslsourceforky3.2.2-1not yet assignedNot reported[1072113]
Debianopensslsourcetrixie3.2.2-1not yet assignedNot reported[1072113]
Debianopensslsourcebookworm3.0.14-1~deb12u1not yet assignedNot reported[1072113]
Ubuntuopenssldebnoble3.0.14-1~deb12u1Not reportedNot reportedNot reported
Ubuntuedk2debnoble2024.02-2ubuntu0.6Not reportedNot reportedNot reported
Ubuntuefi-shell-aa64debnoble2024.02-2ubuntu0.6Not reportedNot reportedNot reported
Ubuntuefi-shell-armdebnoble2024.02-2ubuntu0.6Not reportedNot reportedNot reported
Ubuntuefi-shell-ia32debnoble2024.02-2ubuntu0.6Not reportedNot reportedNot reported
Ubuntuefi-shell-riscv64debnoble2024.02-2ubuntu0.6Not reportedNot reportedNot reported
Ubuntuefi-shell-x64debnoble2024.02-2ubuntu0.6Not reportedNot reportedNot reported
Ubuntuovmfdebnoble2024.02-2ubuntu0.6Not reportedNot reportedNot reported
Ubuntuovmf-ia32debnoble2024.02-2ubuntu0.6Not reportedNot reportedNot reported
Ubuntuqemu-efi-aarch64debnoble2024.02-2ubuntu0.6Not reportedNot reportedNot reported
Ubuntuqemu-efi-armdebnoble2024.02-2ubuntu0.6Not reportedNot reportedNot reported
Ubuntuqemu-efi-riscv64debnoble2024.02-2ubuntu0.6Not reportedNot reportedNot reported
Ubuntuopenssldebnoble3.0.13-0ubuntu3.2Not reportedNot reportedNot reported
Ubuntulibssl-devdebnoble3.0.13-0ubuntu3.2Not reportedNot reportedNot reported
Ubuntulibssl-docdebnoble3.0.13-0ubuntu3.2Not reportedNot reportedNot reported
Ubuntulibssl3t64debnoble3.0.13-0ubuntu3.2Not reportedNot reportedNot reported
Ubuntuopenssldebpro3.0.2-0ubuntu1.17+Fips1Not reportedUBUNTU-CVE-2024-4741Not reported
Ubuntuopenssldeb20.041.1.1f-1ubuntu2.23Not reportedUBUNTU-CVE-2024-4741Not reported
Ubuntuedk2deb22.042022.02-3ubuntu0.22.04.4Not reportedUBUNTU-CVE-2024-4741Not reported
Ubuntuopenssldeb22.043.0.2-0ubuntu1.17Not reportedUBUNTU-CVE-2024-4741Not reported
Ubuntuopenssl-fipsdebpro3.0.13-0ubuntu3.6+Fips1Not reportedUBUNTU-CVE-2024-4741Not reported
Ubuntuedk2deb24.042024.02-2ubuntu0.6Not reportedUBUNTU-CVE-2024-4741Not reported
Ubuntuopenssldeb24.043.0.13-0ubuntu3.2Not reportedUBUNTU-CVE-2024-4741Not reported
Alpineopensslapk3.173.0.14-r0Not reportedALPINE-CVE-2024-4741Not reported
Alpineopensslapk3.183.1.6-r0Not reportedALPINE-CVE-2024-4741Not reported
Alpineopensslapk3.193.1.6-r0Not reportedALPINE-CVE-2024-4741Not reported
Alpineopensslapk3.203.3.0-r3Not reportedALPINE-CVE-2024-4741Not reported
Alpineopensslapk3.213.3.0-r3Not reportedALPINE-CVE-2024-4741Not reported
Alpineopensslapk3.223.3.0-r3Not reportedALPINE-CVE-2024-4741Not reported
Alpineopensslapk3.233.3.0-r3Not reportedALPINE-CVE-2024-4741Not reported
Alpineopensslapk3.243.3.0-r3Not reportedALPINE-CVE-2024-4741Not reported
Suseopenssl-1_1-livepatchesrpmlinux enterprise live patching 15 sp60.5-150600.11.3.1Not reportedSUSE-SU-2025:03632-1Not reported
Suseopenssl-1_1-livepatchesrpmlinux enterprise live patching 15 sp40.4-150400.3.11.1Not reportedSUSE-SU-2024:2197-1Not reported
Suseopenssl-1_1rpmlinux enterprise micro 5.51.1.1l-150500.17.31.1Not reportedSUSE-SU-2024:2051-2Not reported
Suseopenssl-3rpmlinux enterprise micro 5.33.0.8-150400.4.57.1Not reportedSUSE-SU-2024:2088-1Not reported
Suseopenssl-3rpmlinux enterprise micro 5.43.0.8-150400.4.57.1Not reportedSUSE-SU-2024:2088-1Not reported
Suseopenssl-3rpmlinux enterprise high performance computing 15 sp4-espos3.0.8-150400.4.57.1Not reportedSUSE-SU-2024:2088-1Not reported
Suseopenssl-3rpmlinux enterprise high performance computing 15 sp4-ltss3.0.8-150400.4.57.1Not reportedSUSE-SU-2024:2088-1Not reported
Suseopenssl-3rpmlinux enterprise server 15 sp4-ltss3.0.8-150400.4.57.1Not reportedSUSE-SU-2024:2088-1Not reported
Suseopenssl-3rpmlinux enterprise server for sap applications 15 sp43.0.8-150400.4.57.1Not reportedSUSE-SU-2024:2088-1Not reported
Suseopenssl-3rpmmanager proxy 4.33.0.8-150400.4.57.1Not reportedSUSE-SU-2024:2088-1Not reported
Suseopenssl-3rpmmanager server 4.33.0.8-150400.4.57.1Not reportedSUSE-SU-2024:2088-1Not reported
Opensuseopenssl-3rpmleap micro 5.33.0.8-150400.4.57.1Not reportedSUSE-SU-2024:2088-1Not reported
Opensuseopenssl-3rpmleap micro 5.43.0.8-150400.4.57.1Not reportedSUSE-SU-2024:2088-1Not reported
Suseopenssl-1_1rpmlinux enterprise micro 5.31.1.1l-150400.7.69.1Not reportedSUSE-SU-2024:2089-1Not reported
Suseopenssl-1_1rpmlinux enterprise micro 5.41.1.1l-150400.7.69.1Not reportedSUSE-SU-2024:2089-1Not reported
Suseopenssl-1_1rpmlinux enterprise high performance computing 15 sp4-espos1.1.1l-150400.7.69.1Not reportedSUSE-SU-2024:2089-1Not reported
Suseopenssl-1_1rpmlinux enterprise high performance computing 15 sp4-ltss1.1.1l-150400.7.69.1Not reportedSUSE-SU-2024:2089-1Not reported
Suseopenssl-1_1rpmlinux enterprise server 15 sp4-ltss1.1.1l-150400.7.69.1Not reportedSUSE-SU-2024:2089-1Not reported
Suseopenssl-1_1rpmlinux enterprise server for sap applications 15 sp41.1.1l-150400.7.69.1Not reportedSUSE-SU-2024:2089-1Not reported
Suseopenssl-1_1rpmmanager proxy 4.31.1.1l-150400.7.69.1Not reportedSUSE-SU-2024:2089-1Not reported
Suseopenssl-1_1rpmmanager server 4.31.1.1l-150400.7.69.1Not reportedSUSE-SU-2024:2089-1Not reported
Opensuseopenssl-1_1rpmleap micro 5.31.1.1l-150400.7.69.1Not reportedSUSE-SU-2024:2089-1Not reported
Opensuseopenssl-1_1rpmleap micro 5.41.1.1l-150400.7.69.1Not reportedSUSE-SU-2024:2089-1Not reported
Suseopenssl-1_1rpmlinux enterprise software development kit 12 sp51.1.1d-2.107.1Not reportedSUSE-SU-2024:2036-1Not reported
Suseopenssl-1_1rpmlinux enterprise server 12 sp51.1.1d-2.107.1Not reportedSUSE-SU-2024:2036-1Not reported
Suseopenssl-1_1rpmlinux enterprise server for sap applications 12 sp51.1.1d-2.107.1Not reportedSUSE-SU-2024:2036-1Not reported
Suseopenssl-1_1rpmlinux enterprise high performance computing 15 sp2-ltss1.1.1d-150200.11.91.1Not reportedSUSE-SU-2024:2035-1Not reported
Suseopenssl-1_1rpmlinux enterprise high performance computing 15 sp3-ltss1.1.1d-150200.11.91.1Not reportedSUSE-SU-2024:2035-1Not reported
Suseopenssl-1_1rpmlinux enterprise server 15 sp2-ltss1.1.1d-150200.11.91.1Not reportedSUSE-SU-2024:2035-1Not reported
Suseopenssl-1_1rpmlinux enterprise server 15 sp3-ltss1.1.1d-150200.11.91.1Not reportedSUSE-SU-2024:2035-1Not reported
Suseopenssl-1_1rpmlinux enterprise server for sap applications 15 sp21.1.1d-150200.11.91.1Not reportedSUSE-SU-2024:2035-1Not reported
Suseopenssl-1_1rpmlinux enterprise server for sap applications 15 sp31.1.1d-150200.11.91.1Not reportedSUSE-SU-2024:2035-1Not reported
Suseopenssl-1_1rpmlinux enterprise micro 5.11.1.1d-150200.11.91.1Not reportedSUSE-SU-2024:2035-1Not reported
Suseopenssl-1_1rpmlinux enterprise micro 5.21.1.1d-150200.11.91.1Not reportedSUSE-SU-2024:2035-1Not reported
Suseopenssl-1_1rpmenterprise storage 7.11.1.1d-150200.11.91.1Not reportedSUSE-SU-2024:2035-1Not reported
Opensuseopenssl-1_1rpmtumbleweed1.1.1w-11.1Not reportedOPENSUSE-SU-2024:14219-1Not reported
Suseopenssl-3rpmlinux enterprise module for basesystem 15 sp53.0.8-150500.5.36.1Not reportedSUSE-SU-2024:2020-1Not reported
Opensuseopenssl-3rpmleap 15.53.0.8-150500.5.36.1Not reportedSUSE-SU-2024:2020-1Not reported
Suseopenssl-1_1-livepatchesrpmlinux enterprise live patching 15 sp50.4-150500.6.8.1Not reportedSUSE-SU-2024:2271-1Not reported
Opensuseopenssl-3rpmtumbleweed3.1.4-11.1Not reportedOPENSUSE-SU-2024:14220-1Not reported
Suseopenssl-1_1rpmlinux enterprise module for basesystem 15 sp61.1.1w-150600.5.3.1Not reportedSUSE-SU-2024:2059-1Not reported
Suseopenssl-1_1rpmlinux enterprise module for development tools 15 sp61.1.1w-150600.5.3.1Not reportedSUSE-SU-2024:2059-1Not reported
Suseopenssl-1_1rpmlinux enterprise module for legacy 15 sp61.1.1w-150600.5.3.1Not reportedSUSE-SU-2024:2059-1Not reported
Opensuseopenssl-1_1rpmleap 15.61.1.1w-150600.5.3.1Not reportedSUSE-SU-2024:2059-1Not reported
Suseopenssl-1_1-livepatchesrpmlinux enterprise live patching 15 sp70.5-150700.13.3.1Not reportedSUSE-SU-2025:03523-1Not reported
Suseopenssl-1_1rpmlinux enterprise micro 5.51.1.1l-150500.17.31.1Not reportedSUSE-SU-2024:2051-1Not reported
Suseopenssl-1_1rpmlinux enterprise module for basesystem 15 sp51.1.1l-150500.17.31.1Not reportedSUSE-SU-2024:2051-1Not reported
Opensuseopenssl-1_1rpmleap 15.51.1.1l-150500.17.31.1Not reportedSUSE-SU-2024:2051-1Not reported

[Debian bug #1072113]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [libssl3]Unknown

    Source package: [openssl]

    Details (6)
    • 3.0.20-1~deb12u2 · amd64 · bookworm

      Fixed · Fixed: 3.0.14-1~deb12u1

      usn · openssl · debian · bookworm; usn · openssl · debian · 12

    • 3.0.20-1~deb12u2 · arm64 · bookworm

      Fixed · Fixed: 3.0.14-1~deb12u1

      usn · openssl · debian · bookworm; usn · openssl · debian · 12

    • 3.0.20-1~deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 3.0.14-1~deb12u1

      usn · openssl · debian · bookworm; usn · openssl · debian · 12

    • 3.0.20-1~deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 3.0.14-1~deb12u1

      usn · openssl · debian · bookworm; usn · openssl · debian · 12

    • 3.0.17-1~deb12u2 · amd64 · bookworm-updates

      Fixed · Fixed: 3.0.14-1~deb12u1

      usn · openssl · debian · bookworm; usn · openssl · debian · 12

    • 3.0.17-1~deb12u2 · arm64 · bookworm-updates

      Fixed · Fixed: 3.0.14-1~deb12u1

      usn · openssl · debian · bookworm; usn · openssl · debian · 12

  • [libssl-dev]Unknown

    Source package: [openssl]

    Details (6)
    • 3.0.20-1~deb12u2 · amd64 · bookworm

      Fixed · Fixed: 3.0.14-1~deb12u1

      usn · openssl · debian · bookworm; usn · openssl · debian · 12

    • 3.0.20-1~deb12u2 · arm64 · bookworm

      Fixed · Fixed: 3.0.14-1~deb12u1

      usn · openssl · debian · bookworm; usn · openssl · debian · 12

    • 3.0.20-1~deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 3.0.14-1~deb12u1

      usn · openssl · debian · bookworm; usn · openssl · debian · 12

    • 3.0.20-1~deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 3.0.14-1~deb12u1

      usn · openssl · debian · bookworm; usn · openssl · debian · 12

    • 3.0.17-1~deb12u2 · amd64 · bookworm-updates

      Fixed · Fixed: 3.0.14-1~deb12u1

      usn · openssl · debian · bookworm; usn · openssl · debian · 12

    • 3.0.17-1~deb12u2 · arm64 · bookworm-updates

      Fixed · Fixed: 3.0.14-1~deb12u1

      usn · openssl · debian · bookworm; usn · openssl · debian · 12

  • [libssl-doc]Unknown

    Source package: [openssl]

    Details (6)
    • 3.0.20-1~deb12u2 · all · bookworm

      Fixed · Fixed: 3.0.14-1~deb12u1

      usn · openssl · debian · bookworm; usn · openssl · debian · 12

    • 3.0.20-1~deb12u2 · all · bookworm

      Fixed · Fixed: 3.0.14-1~deb12u1

      usn · openssl · debian · bookworm; usn · openssl · debian · 12

    • 3.0.20-1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 3.0.14-1~deb12u1

      usn · openssl · debian · bookworm; usn · openssl · debian · 12

    • 3.0.20-1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 3.0.14-1~deb12u1

      usn · openssl · debian · bookworm; usn · openssl · debian · 12

    • 3.0.17-1~deb12u2 · all · bookworm-updates

      Fixed · Fixed: 3.0.14-1~deb12u1

      usn · openssl · debian · bookworm; usn · openssl · debian · 12

    • 3.0.17-1~deb12u2 · all · bookworm-updates

      Fixed · Fixed: 3.0.14-1~deb12u1

      usn · openssl · debian · bookworm; usn · openssl · debian · 12

  • [openssl]Unknown
    Details (6)
    • 3.0.20-1~deb12u2 · amd64 · bookworm

      Fixed · Fixed: 3.0.14-1~deb12u1

      usn · openssl · debian · bookworm; usn · openssl · debian · 12

    • 3.0.20-1~deb12u2 · arm64 · bookworm

      Fixed · Fixed: 3.0.14-1~deb12u1

      usn · openssl · debian · bookworm; usn · openssl · debian · 12

    • 3.0.20-1~deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 3.0.14-1~deb12u1

      usn · openssl · debian · bookworm; usn · openssl · debian · 12

    • 3.0.20-1~deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 3.0.14-1~deb12u1

      usn · openssl · debian · bookworm; usn · openssl · debian · 12

    • 3.0.17-1~deb12u2 · amd64 · bookworm-updates

      Fixed · Fixed: 3.0.14-1~deb12u1

      usn · openssl · debian · bookworm; usn · openssl · debian · 12

    • 3.0.17-1~deb12u2 · arm64 · bookworm-updates

      Fixed · Fixed: 3.0.14-1~deb12u1

      usn · openssl · debian · bookworm; usn · openssl · debian · 12

[Debian 13 (Trixie)]

  • [libssl3t64]Unknown

    Source package: [openssl]

    Details (6)
    • 3.5.6-1~deb13u2 · amd64 · trixie

      Fixed · Fixed: 3.2.2-1

      usn · openssl · debian · 13

    • 3.5.6-1~deb13u2 · arm64 · trixie

      Fixed · Fixed: 3.2.2-1

      usn · openssl · debian · 13

    • 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 3.2.2-1

      usn · openssl · debian · 13

    • 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 3.2.2-1

      usn · openssl · debian · 13

    • 3.5.7-1~deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 3.2.2-1

      usn · openssl · debian · 13

    • 3.5.7-1~deb13u3 · amd64 · trixie-security

      Fixed · Fixed: 3.2.2-1

      usn · openssl · debian · 13

  • [libssl-dev]Unknown

    Source package: [openssl]

    Details (6)
    • 3.5.6-1~deb13u2 · amd64 · trixie

      Fixed · Fixed: 3.2.2-1

      usn · openssl · debian · 13

    • 3.5.6-1~deb13u2 · arm64 · trixie

      Fixed · Fixed: 3.2.2-1

      usn · openssl · debian · 13

    • 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 3.2.2-1

      usn · openssl · debian · 13

    • 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 3.2.2-1

      usn · openssl · debian · 13

    • 3.5.7-1~deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 3.2.2-1

      usn · openssl · debian · 13

    • 3.5.7-1~deb13u3 · amd64 · trixie-security

      Fixed · Fixed: 3.2.2-1

      usn · openssl · debian · 13

  • [libssl-doc]Unknown

    Source package: [openssl]

    Details (6)
    • 3.5.6-1~deb13u2 · all · trixie

      Fixed · Fixed: 3.2.2-1

      usn · openssl · debian · 13

    • 3.5.6-1~deb13u2 · all · trixie

      Fixed · Fixed: 3.2.2-1

      usn · openssl · debian · 13

    • 3.5.6-1~deb13u2 · all · trixie-security · Historical version

      Fixed · Fixed: 3.2.2-1

      usn · openssl · debian · 13

    • 3.5.7-1~deb13u2 · all · trixie-security · Historical version

      Fixed · Fixed: 3.2.2-1

      usn · openssl · debian · 13

    • 3.5.7-1~deb13u2 · all · trixie-security

      Fixed · Fixed: 3.2.2-1

      usn · openssl · debian · 13

    • 3.5.7-1~deb13u3 · all · trixie-security

      Fixed · Fixed: 3.2.2-1

      usn · openssl · debian · 13

  • [openssl]Unknown
    Details (6)
    • 3.5.6-1~deb13u2 · amd64 · trixie

      Fixed · Fixed: 3.2.2-1

      usn · openssl · debian · 13

    • 3.5.6-1~deb13u2 · arm64 · trixie

      Fixed · Fixed: 3.2.2-1

      usn · openssl · debian · 13

    • 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 3.2.2-1

      usn · openssl · debian · 13

    • 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 3.2.2-1

      usn · openssl · debian · 13

    • 3.5.7-1~deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 3.2.2-1

      usn · openssl · debian · 13

    • 3.5.7-1~deb13u3 · amd64 · trixie-security

      Fixed · Fixed: 3.2.2-1

      usn · openssl · debian · 13

  • Source package: [openssl]

    Details (6)
    • 3.5.6-1~deb13u2 · amd64 · trixie

      Fixed · Fixed: 3.2.2-1

      usn · openssl · debian · 13

    • 3.5.6-1~deb13u2 · arm64 · trixie

      Fixed · Fixed: 3.2.2-1

      usn · openssl · debian · 13

    • 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 3.2.2-1

      usn · openssl · debian · 13

    • 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 3.2.2-1

      usn · openssl · debian · 13

    • 3.5.7-1~deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 3.2.2-1

      usn · openssl · debian · 13

    • 3.5.7-1~deb13u3 · amd64 · trixie-security

      Fixed · Fixed: 3.2.2-1

      usn · openssl · debian · 13

  • Source package: [openssl]

    Details (6)
    • 3.5.6-1~deb13u2 · amd64 · trixie

      Fixed · Fixed: 3.2.2-1

      usn · openssl · debian · 13

    • 3.5.6-1~deb13u2 · arm64 · trixie

      Fixed · Fixed: 3.2.2-1

      usn · openssl · debian · 13

    • 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 3.2.2-1

      usn · openssl · debian · 13

    • 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 3.2.2-1

      usn · openssl · debian · 13

    • 3.5.7-1~deb13u2 · arm64 · trixie-security

      Fixed · Fixed: 3.2.2-1

      usn · openssl · debian · 13

    • 3.5.7-1~deb13u3 · amd64 · trixie-security

      Fixed · Fixed: 3.2.2-1

      usn · openssl · debian · 13

[openSUSE Tumbleweed]

  • [libopenssl3]Unknown

    Source package: [openssl-3]

    Details (1)
    • 3.5.3-8.1 · x86_64 · tumbleweed

      Unknown · Fixed: 3.1.4-11.1

      Version impact unknown

      usn · openssl-3 · opensuse · tumbleweed

  • Source package: [openssl-3]

    Details (1)
    • 3.5.3-8.1 · x86_64 · tumbleweed

      Unknown · Fixed: 3.1.4-11.1

      Version impact unknown

      usn · openssl-3 · opensuse · tumbleweed

  • Source package: [openssl-3]

    Details (1)
    • 3.5.3-8.1 · x86_64 · tumbleweed

      Unknown · Fixed: 3.1.4-11.1

      Version impact unknown

      usn · openssl-3 · opensuse · tumbleweed

  • Source package: [openssl-3]

    Details (1)
    • 3.5.3-8.1 · x86_64 · tumbleweed

      Unknown · Fixed: 3.1.4-11.1

      Version impact unknown

      usn · openssl-3 · opensuse · tumbleweed

  • Source package: [openssl-3]

    Details (1)
    • 3.5.3-8.1 · x86_64 · tumbleweed

      Unknown · Fixed: 3.1.4-11.1

      Version impact unknown

      usn · openssl-3 · opensuse · tumbleweed

  • Source package: [openssl-3]

    Details (1)
    • 3.5.3-8.1 · x86_64 · tumbleweed

      Unknown · Fixed: 3.1.4-11.1

      Version impact unknown

      usn · openssl-3 · opensuse · tumbleweed

  • Source package: [openssl-3]

    Details (1)
    • 3.5.3-8.1 · x86_64 · tumbleweed

      Unknown · Fixed: 3.1.4-11.1

      Version impact unknown

      usn · openssl-3 · opensuse · tumbleweed

  • Source package: [openssl-3]

    Details (1)
    • 3.5.3-8.1 · x86_64 · tumbleweed

      Unknown · Fixed: 3.1.4-11.1

      Version impact unknown

      usn · openssl-3 · opensuse · tumbleweed

  • [openssl-3]Unknown

    Source package: [openssl-3]

    Details (1)
    • 3.5.3-8.1 · x86_64 · tumbleweed

      Fixed · Fixed: 3.1.4-11.1

      usn · openssl-3 · opensuse · tumbleweed

  • [openssl-3-doc]Unknown

    Source package: [openssl-3]

    Details (1)
    • 3.5.3-8.1 · noarch · tumbleweed

      Unknown · Fixed: 3.1.4-11.1

      Version impact unknown

      usn · openssl-3 · opensuse · tumbleweed

Observed:

References

[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]