CVE catalog
CVE-2024-6119
EDK II vulnerabilities
- Severity
- High · CVSS 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 66.58% · Oct 27, 2026
Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address resulting in abnormal termination of the application process. Impact summary: Abnormal termination of an application can a cause a denial of service. Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address when comparing the expected name with an `otherName` subject alternative name of an X.509 certificate. This may result in an exception that terminates the application program. Note that basic certificate chain validation (signatures, dates, ...) is not affected, the denial of service can occur only when the application also specifies an expected DNS name, Email address or IP address. TLS servers rarely solicit client certificates, and even when they do, they generally don't perform a name check against a reference identifier (expected identity), but rather extract the presented identity after checking the certificate chain. So TLS servers are generally not affected and the severity of the issue is Moderate. The FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | openssl | sid | 3.6.5-1 | fixed |
| Debian | openssl | forky | 3.6.5-1 | fixed |
| Debian | openssl | trixie | 3.5.7-1~deb13u2 | fixed |
| Debian | openssl | trixie-security | 3.5.7-1~deb13u3 | fixed |
| Debian | openssl | bookworm | 3.0.20-1~deb12u2 | fixed |
| Debian | openssl | bookworm-security | 3.0.22-1~deb12u2 | fixed |
| Ubuntu | openssl | noble | 3.0.14-1~deb12u2 | fixed |
| Ubuntu | edk2 | noble | 2024.02-2ubuntu0.6 | fixed |
| Ubuntu | efi-shell-aa64 | noble | 2024.02-2ubuntu0.6 | fixed |
| Ubuntu | efi-shell-arm | noble | 2024.02-2ubuntu0.6 | fixed |
| Ubuntu | efi-shell-ia32 | noble | 2024.02-2ubuntu0.6 | fixed |
| Ubuntu | efi-shell-riscv64 | noble | 2024.02-2ubuntu0.6 | fixed |
| Ubuntu | efi-shell-x64 | noble | 2024.02-2ubuntu0.6 | fixed |
| Ubuntu | ovmf | noble | 2024.02-2ubuntu0.6 | fixed |
| Ubuntu | ovmf-ia32 | noble | 2024.02-2ubuntu0.6 | fixed |
| Ubuntu | qemu-efi-aarch64 | noble | 2024.02-2ubuntu0.6 | fixed |
| Ubuntu | qemu-efi-arm | noble | 2024.02-2ubuntu0.6 | fixed |
| Ubuntu | qemu-efi-riscv64 | noble | 2024.02-2ubuntu0.6 | fixed |
| Ubuntu | openssl | noble | 3.0.13-0ubuntu3.4 | fixed |
| Ubuntu | libssl-dev | noble | 3.0.13-0ubuntu3.4 | fixed |
| Ubuntu | libssl-doc | noble | 3.0.13-0ubuntu3.4 | fixed |
| Ubuntu | libssl3t64 | noble | 3.0.13-0ubuntu3.4 | fixed |
| Alpine | openssl | 3.17 | 3.0.15-r0 | fixed |
| Alpine | openssl | 3.18 | 3.1.7-r0 | fixed |
| Alpine | openssl | 3.19 | 3.1.7-r0 | fixed |
| Alpine | openssl | 3.20 | 3.3.2-r0 | fixed |
| Alpine | openssl | 3.21 | 3.3.2-r0 | fixed |
| Alpine | openssl | 3.22 | 3.3.2-r0 | fixed |
| Alpine | openssl | 3.23 | 3.3.2-r0 | fixed |
| Alpine | openssl | 3.24 | 3.3.2-r0 | fixed |
| Ubuntu | openssl | 22.04 | 1.1.1l-1ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.0-1ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.1-0ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.2 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.4 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.5 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.6 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.7 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.8 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.9 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.10 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.12 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.13 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.14 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.15 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.16 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.17 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.18 | fixed |
| Ubuntu | openssl | 24.04 | 3.0.10-1ubuntu2 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.10-1ubuntu2.1 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.10-1ubuntu3 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.10-1ubuntu4 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu2 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.1 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.2 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.3 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.4 | fixed |
| Ubuntu | nodejs | pro | 12.22.5~dfsg-5ubuntu1 | vulnerable |
| Ubuntu | nodejs | pro | 12.22.7~dfsg-2ubuntu1 | vulnerable |
| Ubuntu | nodejs | pro | 12.22.7~dfsg-2ubuntu3 | vulnerable |
| Ubuntu | nodejs | pro | 12.22.9~dfsg-1ubuntu2 | vulnerable |
| Ubuntu | nodejs | pro | 12.22.9~dfsg-1ubuntu3 | vulnerable |
| Ubuntu | nodejs | pro | 12.22.9~dfsg-1ubuntu3.1 | vulnerable |
| Ubuntu | nodejs | pro | 12.22.9~dfsg-1ubuntu3.2 | vulnerable |
| Ubuntu | nodejs | pro | 12.22.9~dfsg-1ubuntu3.3 | vulnerable |
| Ubuntu | nodejs | pro | 12.22.9~dfsg-1ubuntu3.4 | vulnerable |
| Ubuntu | nodejs | pro | 12.22.9~dfsg-1ubuntu3.5 | vulnerable |
| Ubuntu | nodejs | pro | 12.22.9~dfsg-1ubuntu3.6 | vulnerable |
| Ubuntu | nodejs | pro | 12.22.9~dfsg-1ubuntu3.6+esm2 | vulnerable |
| Ubuntu | openssl | 22.04 | 1.1.1l-1ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.0-1ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.1-0ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.2 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.4 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.5 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.6 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.7 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.8 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.9 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.10 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.12 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.13 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.14 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.15 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.16 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.17 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.18 | fixed |
| Ubuntu | openssl | pro | 3.0.2-0ubuntu1.10+Fips1 | vulnerable |
| Ubuntu | openssl | pro | 3.0.2-0ubuntu1.12+Fips1 | vulnerable |
| Ubuntu | openssl | pro | 3.0.2-0ubuntu1.14+Fips1 | vulnerable |
| Ubuntu | openssl | pro | 3.0.2-0ubuntu1.15+Fips1 | vulnerable |
| Ubuntu | openssl | pro | 3.0.2-0ubuntu1.16+Fips1 | vulnerable |
| Ubuntu | openssl | pro | 3.0.2-0ubuntu1.17+Fips1 | vulnerable |
| Ubuntu | openssl | pro | 3.0.2-0ubuntu1.18+Fips1 | fixed |
| Ubuntu | openssl-fips | pro | 3.0.13-0ubuntu3+Fips1 | vulnerable |
| Ubuntu | openssl-fips | pro | 3.0.13-0ubuntu3.6+Fips1 | fixed |
| Ubuntu | edk2 | 24.04 | 2023.05-2 | vulnerable |
| Ubuntu | edk2 | 24.04 | 2023.11-2 | vulnerable |
| Ubuntu | edk2 | 24.04 | 2023.11-3 | vulnerable |
| Ubuntu | edk2 | 24.04 | 2023.11-4 | vulnerable |
| Ubuntu | edk2 | 24.04 | 2023.11-5 | vulnerable |
| Ubuntu | edk2 | 24.04 | 2023.11-6 | vulnerable |
| Ubuntu | edk2 | 24.04 | 2023.11-8 | vulnerable |
| Ubuntu | edk2 | 24.04 | 2024.02-1 | vulnerable |
| Ubuntu | edk2 | 24.04 | 2024.02-2 | vulnerable |
| Ubuntu | edk2 | 24.04 | 2024.02-2ubuntu0.1 | vulnerable |
| Ubuntu | edk2 | 24.04 | 2024.02-2ubuntu0.3 | vulnerable |
| Ubuntu | edk2 | 24.04 | 2024.02-2ubuntu0.4 | vulnerable |
| Ubuntu | edk2 | 24.04 | 2024.02-2ubuntu0.5 | vulnerable |
| Ubuntu | edk2 | 24.04 | 2024.02-2ubuntu0.6 | fixed |
| Ubuntu | openssl | 24.04 | 3.0.10-1ubuntu2 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.10-1ubuntu2.1 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.10-1ubuntu3 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.10-1ubuntu4 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu2 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.1 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.2 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.3 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.4 | fixed |
| Suse | openssl-3 | linux enterprise module for certifications 15 sp7 | 3.1.4-150600.5.15.1 | fixed |
| Opensuse | openssl-3 | tumbleweed | 3.1.4-13.1 | fixed |
| Suse | openssl-3 | linux enterprise module for basesystem 15 sp5 | 3.0.8-150500.5.42.1 | fixed |
| Opensuse | openssl-3 | leap 15.5 | 3.0.8-150500.5.42.1 | fixed |
| Suse | openssl-3 | linux enterprise micro 5.3 | 3.0.8-150400.4.63.1 | fixed |
| Suse | openssl-3 | linux enterprise micro 5.4 | 3.0.8-150400.4.63.1 | fixed |
| Suse | openssl-3 | linux enterprise high performance computing 15 sp4-espos | 3.0.8-150400.4.63.1 | fixed |
| Suse | openssl-3 | linux enterprise high performance computing 15 sp4-ltss | 3.0.8-150400.4.63.1 | fixed |
| Suse | openssl-3 | linux enterprise server 15 sp4-ltss | 3.0.8-150400.4.63.1 | fixed |
| Suse | openssl-3 | linux enterprise server for sap applications 15 sp4 | 3.0.8-150400.4.63.1 | fixed |
| Suse | openssl-3 | manager proxy 4.3 | 3.0.8-150400.4.63.1 | fixed |
| Suse | openssl-3 | manager server 4.3 | 3.0.8-150400.4.63.1 | fixed |
| Suse | openssl-3 | linux enterprise module for basesystem 15 sp6 | 3.1.4-150600.5.15.1 | fixed |
| Opensuse | openssl-3 | leap 15.6 | 3.1.4-150600.5.15.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | openssl | source | sid | 3.3.2-1 | not yet assigned | Not reported | Not reported |
| Debian | openssl | source | forky | 3.3.2-1 | not yet assigned | Not reported | Not reported |
| Debian | openssl | source | trixie | 3.3.2-1 | not yet assigned | Not reported | Not reported |
| Debian | openssl | source | bookworm | 3.0.14-1~deb12u2 | not yet assigned | Not reported | Not reported |
| Ubuntu | openssl | deb | noble | 3.0.14-1~deb12u2 | Not reported | Not reported | Not reported |
| Ubuntu | edk2 | deb | noble | 2024.02-2ubuntu0.6 | Not reported | Not reported | Not reported |
| Ubuntu | efi-shell-aa64 | deb | noble | 2024.02-2ubuntu0.6 | Not reported | Not reported | Not reported |
| Ubuntu | efi-shell-arm | deb | noble | 2024.02-2ubuntu0.6 | Not reported | Not reported | Not reported |
| Ubuntu | efi-shell-ia32 | deb | noble | 2024.02-2ubuntu0.6 | Not reported | Not reported | Not reported |
| Ubuntu | efi-shell-riscv64 | deb | noble | 2024.02-2ubuntu0.6 | Not reported | Not reported | Not reported |
| Ubuntu | efi-shell-x64 | deb | noble | 2024.02-2ubuntu0.6 | Not reported | Not reported | Not reported |
| Ubuntu | ovmf | deb | noble | 2024.02-2ubuntu0.6 | Not reported | Not reported | Not reported |
| Ubuntu | ovmf-ia32 | deb | noble | 2024.02-2ubuntu0.6 | Not reported | Not reported | Not reported |
| Ubuntu | qemu-efi-aarch64 | deb | noble | 2024.02-2ubuntu0.6 | Not reported | Not reported | Not reported |
| Ubuntu | qemu-efi-arm | deb | noble | 2024.02-2ubuntu0.6 | Not reported | Not reported | Not reported |
| Ubuntu | qemu-efi-riscv64 | deb | noble | 2024.02-2ubuntu0.6 | Not reported | Not reported | Not reported |
| Ubuntu | openssl | deb | noble | 3.0.13-0ubuntu3.4 | Not reported | Not reported | Not reported |
| Ubuntu | libssl-dev | deb | noble | 3.0.13-0ubuntu3.4 | Not reported | Not reported | Not reported |
| Ubuntu | libssl-doc | deb | noble | 3.0.13-0ubuntu3.4 | Not reported | Not reported | Not reported |
| Ubuntu | libssl3t64 | deb | noble | 3.0.13-0ubuntu3.4 | Not reported | Not reported | Not reported |
| Alpine | openssl | apk | 3.17 | 3.0.15-r0 | Not reported | ALPINE-CVE-2024-6119 | Not reported |
| Alpine | openssl | apk | 3.18 | 3.1.7-r0 | Not reported | ALPINE-CVE-2024-6119 | Not reported |
| Alpine | openssl | apk | 3.19 | 3.1.7-r0 | Not reported | ALPINE-CVE-2024-6119 | Not reported |
| Alpine | openssl | apk | 3.20 | 3.3.2-r0 | Not reported | ALPINE-CVE-2024-6119 | Not reported |
| Alpine | openssl | apk | 3.21 | 3.3.2-r0 | Not reported | ALPINE-CVE-2024-6119 | Not reported |
| Alpine | openssl | apk | 3.22 | 3.3.2-r0 | Not reported | ALPINE-CVE-2024-6119 | Not reported |
| Alpine | openssl | apk | 3.23 | 3.3.2-r0 | Not reported | ALPINE-CVE-2024-6119 | Not reported |
| Alpine | openssl | apk | 3.24 | 3.3.2-r0 | Not reported | ALPINE-CVE-2024-6119 | Not reported |
| Ubuntu | openssl | deb | 22.04 | 3.0.2-0ubuntu1.18 | Not reported | USN-6986-1 | Not reported |
| Ubuntu | openssl | deb | 24.04 | 3.0.13-0ubuntu3.4 | Not reported | USN-6986-1 | Not reported |
| Ubuntu | openssl | deb | 22.04 | 3.0.2-0ubuntu1.18 | Not reported | UBUNTU-CVE-2024-6119 | Not reported |
| Ubuntu | openssl | deb | pro | 3.0.2-0ubuntu1.18+Fips1 | Not reported | UBUNTU-CVE-2024-6119 | Not reported |
| Ubuntu | openssl-fips | deb | pro | 3.0.13-0ubuntu3.6+Fips1 | Not reported | UBUNTU-CVE-2024-6119 | Not reported |
| Ubuntu | edk2 | deb | 24.04 | 2024.02-2ubuntu0.6 | Not reported | UBUNTU-CVE-2024-6119 | Not reported |
| Ubuntu | openssl | deb | 24.04 | 3.0.13-0ubuntu3.4 | Not reported | UBUNTU-CVE-2024-6119 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise module for certifications 15 sp7 | 3.1.4-150600.5.15.1 | Not reported | SUSE-SU-2025:1516-1 | Not reported |
| Opensuse | openssl-3 | rpm | tumbleweed | 3.1.4-13.1 | Not reported | OPENSUSE-SU-2024:14317-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise module for basesystem 15 sp5 | 3.0.8-150500.5.42.1 | Not reported | SUSE-SU-2024:3105-1 | Not reported |
| Opensuse | openssl-3 | rpm | leap 15.5 | 3.0.8-150500.5.42.1 | Not reported | SUSE-SU-2024:3105-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise micro 5.3 | 3.0.8-150400.4.63.1 | Not reported | SUSE-SU-2024:3107-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise micro 5.4 | 3.0.8-150400.4.63.1 | Not reported | SUSE-SU-2024:3107-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise high performance computing 15 sp4-espos | 3.0.8-150400.4.63.1 | Not reported | SUSE-SU-2024:3107-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise high performance computing 15 sp4-ltss | 3.0.8-150400.4.63.1 | Not reported | SUSE-SU-2024:3107-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise server 15 sp4-ltss | 3.0.8-150400.4.63.1 | Not reported | SUSE-SU-2024:3107-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise server for sap applications 15 sp4 | 3.0.8-150400.4.63.1 | Not reported | SUSE-SU-2024:3107-1 | Not reported |
| Suse | openssl-3 | rpm | manager proxy 4.3 | 3.0.8-150400.4.63.1 | Not reported | SUSE-SU-2024:3107-1 | Not reported |
| Suse | openssl-3 | rpm | manager server 4.3 | 3.0.8-150400.4.63.1 | Not reported | SUSE-SU-2024:3107-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise module for basesystem 15 sp6 | 3.1.4-150600.5.15.1 | Not reported | SUSE-SU-2024:3106-1 | Not reported |
| Opensuse | openssl-3 | rpm | leap 15.6 | 3.1.4-150600.5.15.1 | Not reported | SUSE-SU-2024:3106-1 | Not reported |
OpenFactory catalog packages
[openSUSE Tumbleweed]
- [libopenssl3]Unknown
Source package: [openssl-3]
Details (1)
3.5.3-8.1· x86_64 · tumbleweedUnknown · Fixed:
3.1.4-13.1Version impact unknown
usn · openssl-3 · opensuse · tumbleweed
- [libopenssl3-32bit]Unknown
Source package: [openssl-3]
Details (1)
3.5.3-8.1· x86_64 · tumbleweedUnknown · Fixed:
3.1.4-13.1Version impact unknown
usn · openssl-3 · opensuse · tumbleweed
- [libopenssl-3-devel]Unknown
Source package: [openssl-3]
Details (1)
3.5.3-8.1· x86_64 · tumbleweedUnknown · Fixed:
3.1.4-13.1Version impact unknown
usn · openssl-3 · opensuse · tumbleweed
- [libopenssl-3-devel-32bit]Unknown
Source package: [openssl-3]
Details (1)
3.5.3-8.1· x86_64 · tumbleweedUnknown · Fixed:
3.1.4-13.1Version impact unknown
usn · openssl-3 · opensuse · tumbleweed
- [libopenssl-3-fips-provider]Unknown
Source package: [openssl-3]
Details (1)
3.5.3-8.1· x86_64 · tumbleweedUnknown · Fixed:
3.1.4-13.1Version impact unknown
usn · openssl-3 · opensuse · tumbleweed
- [libopenssl-3-fips-provider-32bit]Unknown
Source package: [openssl-3]
Details (1)
3.5.3-8.1· x86_64 · tumbleweedUnknown · Fixed:
3.1.4-13.1Version impact unknown
usn · openssl-3 · opensuse · tumbleweed
- [libopenssl-3-fips-provider-x86-64-v3]Unknown
Source package: [openssl-3]
Details (1)
3.5.3-8.1· x86_64 · tumbleweedUnknown · Fixed:
3.1.4-13.1Version impact unknown
usn · openssl-3 · opensuse · tumbleweed
- [libopenssl3-x86-64-v3]Unknown
Source package: [openssl-3]
Details (1)
3.5.3-8.1· x86_64 · tumbleweedUnknown · Fixed:
3.1.4-13.1Version impact unknown
usn · openssl-3 · opensuse · tumbleweed
- [openssl-3-doc]Unknown
Source package: [openssl-3]
Details (1)
3.5.3-8.1· noarch · tumbleweedUnknown · Fixed:
3.1.4-13.1Version impact unknown
usn · openssl-3 · opensuse · tumbleweed
- [openssl-3]Fixed
Source package: [openssl-3]
Details (1)
3.5.3-8.1· x86_64 · tumbleweedFixed · Fixed:
3.1.4-13.1usn · openssl-3 · opensuse · tumbleweed
[Debian 12 (Bookworm)]
- [libssl3]Fixed
Source package: [openssl]
Details (6)
3.0.20-1~deb12u2· amd64 · bookwormFixed · Fixed:
3.0.14-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.20-1~deb12u2· arm64 · bookwormFixed · Fixed:
3.0.14-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.20-1~deb12u2· amd64 · bookworm-securityFixed · Fixed:
3.0.14-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.20-1~deb12u2· arm64 · bookworm-securityFixed · Fixed:
3.0.14-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.17-1~deb12u2· amd64 · bookworm-updatesFixed · Fixed:
3.0.14-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.17-1~deb12u2· arm64 · bookworm-updatesFixed · Fixed:
3.0.14-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
- [libssl-dev]Fixed
Source package: [openssl]
Details (6)
3.0.20-1~deb12u2· amd64 · bookwormFixed · Fixed:
3.0.14-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.20-1~deb12u2· arm64 · bookwormFixed · Fixed:
3.0.14-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.20-1~deb12u2· amd64 · bookworm-securityFixed · Fixed:
3.0.14-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.20-1~deb12u2· arm64 · bookworm-securityFixed · Fixed:
3.0.14-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.17-1~deb12u2· amd64 · bookworm-updatesFixed · Fixed:
3.0.14-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.17-1~deb12u2· arm64 · bookworm-updatesFixed · Fixed:
3.0.14-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
- [libssl-doc]Fixed
Source package: [openssl]
Details (6)
3.0.20-1~deb12u2· all · bookwormFixed · Fixed:
3.0.14-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.20-1~deb12u2· all · bookwormFixed · Fixed:
3.0.14-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.20-1~deb12u2· all · bookworm-securityFixed · Fixed:
3.0.14-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.20-1~deb12u2· all · bookworm-securityFixed · Fixed:
3.0.14-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.17-1~deb12u2· all · bookworm-updatesFixed · Fixed:
3.0.14-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.17-1~deb12u2· all · bookworm-updatesFixed · Fixed:
3.0.14-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
- [openssl]Fixed
Details (6)
3.0.20-1~deb12u2· amd64 · bookwormFixed · Fixed:
3.0.14-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.20-1~deb12u2· arm64 · bookwormFixed · Fixed:
3.0.14-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.20-1~deb12u2· amd64 · bookworm-securityFixed · Fixed:
3.0.14-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.20-1~deb12u2· arm64 · bookworm-securityFixed · Fixed:
3.0.14-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.17-1~deb12u2· amd64 · bookworm-updatesFixed · Fixed:
3.0.14-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
3.0.17-1~deb12u2· arm64 · bookworm-updatesFixed · Fixed:
3.0.14-1~deb12u2usn · openssl · debian · bookworm; usn · openssl · debian · 12
[Debian 13 (Trixie)]
- [libssl3t64]Fixed
Source package: [openssl]
Details (6)
3.5.6-1~deb13u2· amd64 · trixieFixed · Fixed:
3.3.2-1usn · openssl · debian · 13
3.5.6-1~deb13u2· arm64 · trixieFixed · Fixed:
3.3.2-1usn · openssl · debian · 13
3.5.6-1~deb13u2· amd64 · trixie-security · Historical versionFixed · Fixed:
3.3.2-1usn · openssl · debian · 13
3.5.7-1~deb13u2· amd64 · trixie-security · Historical versionFixed · Fixed:
3.3.2-1usn · openssl · debian · 13
3.5.7-1~deb13u2· arm64 · trixie-securityFixed · Fixed:
3.3.2-1usn · openssl · debian · 13
3.5.7-1~deb13u3· amd64 · trixie-securityFixed · Fixed:
3.3.2-1usn · openssl · debian · 13
- [libssl-dev]Fixed
Source package: [openssl]
Details (6)
3.5.6-1~deb13u2· amd64 · trixieFixed · Fixed:
3.3.2-1usn · openssl · debian · 13
3.5.6-1~deb13u2· arm64 · trixieFixed · Fixed:
3.3.2-1usn · openssl · debian · 13
3.5.6-1~deb13u2· amd64 · trixie-security · Historical versionFixed · Fixed:
3.3.2-1usn · openssl · debian · 13
3.5.7-1~deb13u2· amd64 · trixie-security · Historical versionFixed · Fixed:
3.3.2-1usn · openssl · debian · 13
3.5.7-1~deb13u2· arm64 · trixie-securityFixed · Fixed:
3.3.2-1usn · openssl · debian · 13
3.5.7-1~deb13u3· amd64 · trixie-securityFixed · Fixed:
3.3.2-1usn · openssl · debian · 13
- [libssl-doc]Fixed
Source package: [openssl]
Details (6)
3.5.6-1~deb13u2· all · trixieFixed · Fixed:
3.3.2-1usn · openssl · debian · 13
3.5.6-1~deb13u2· all · trixieFixed · Fixed:
3.3.2-1usn · openssl · debian · 13
3.5.6-1~deb13u2· all · trixie-security · Historical versionFixed · Fixed:
3.3.2-1usn · openssl · debian · 13
3.5.7-1~deb13u2· all · trixie-security · Historical versionFixed · Fixed:
3.3.2-1usn · openssl · debian · 13
3.5.7-1~deb13u2· all · trixie-securityFixed · Fixed:
3.3.2-1usn · openssl · debian · 13
3.5.7-1~deb13u3· all · trixie-securityFixed · Fixed:
3.3.2-1usn · openssl · debian · 13
- [openssl]Fixed
Details (6)
3.5.6-1~deb13u2· amd64 · trixieFixed · Fixed:
3.3.2-1usn · openssl · debian · 13
3.5.6-1~deb13u2· arm64 · trixieFixed · Fixed:
3.3.2-1usn · openssl · debian · 13
3.5.6-1~deb13u2· amd64 · trixie-security · Historical versionFixed · Fixed:
3.3.2-1usn · openssl · debian · 13
3.5.7-1~deb13u2· amd64 · trixie-security · Historical versionFixed · Fixed:
3.3.2-1usn · openssl · debian · 13
3.5.7-1~deb13u2· arm64 · trixie-securityFixed · Fixed:
3.3.2-1usn · openssl · debian · 13
3.5.7-1~deb13u3· amd64 · trixie-securityFixed · Fixed:
3.3.2-1usn · openssl · debian · 13
- [openssl-provider-fips]Fixed
Source package: [openssl]
Details (6)
3.5.6-1~deb13u2· amd64 · trixieFixed · Fixed:
3.3.2-1usn · openssl · debian · 13
3.5.6-1~deb13u2· arm64 · trixieFixed · Fixed:
3.3.2-1usn · openssl · debian · 13
3.5.6-1~deb13u2· amd64 · trixie-security · Historical versionFixed · Fixed:
3.3.2-1usn · openssl · debian · 13
3.5.7-1~deb13u2· amd64 · trixie-security · Historical versionFixed · Fixed:
3.3.2-1usn · openssl · debian · 13
3.5.7-1~deb13u2· arm64 · trixie-securityFixed · Fixed:
3.3.2-1usn · openssl · debian · 13
3.5.7-1~deb13u3· amd64 · trixie-securityFixed · Fixed:
3.3.2-1usn · openssl · debian · 13
- [openssl-provider-legacy]Fixed
Source package: [openssl]
Details (6)
3.5.6-1~deb13u2· amd64 · trixieFixed · Fixed:
3.3.2-1usn · openssl · debian · 13
3.5.6-1~deb13u2· arm64 · trixieFixed · Fixed:
3.3.2-1usn · openssl · debian · 13
3.5.6-1~deb13u2· amd64 · trixie-security · Historical versionFixed · Fixed:
3.3.2-1usn · openssl · debian · 13
3.5.7-1~deb13u2· amd64 · trixie-security · Historical versionFixed · Fixed:
3.3.2-1usn · openssl · debian · 13
3.5.7-1~deb13u2· arm64 · trixie-securityFixed · Fixed:
3.3.2-1usn · openssl · debian · 13
3.5.7-1~deb13u3· amd64 · trixie-securityFixed · Fixed:
3.3.2-1usn · openssl · debian · 13
Observed:
References
- [https://cert-portal.siemens.com/productcert/csaf/ssa-769027.json]
- [https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_3105-1.json]
- [https://osv.dev/vulnerability/ALPINE-CVE-2024-6119]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2024-6119]
- [https://osv.dev/vulnerability/DSA-5764-1]
- [https://osv.dev/vulnerability/SUSE-SU-2024:3105-1]
- [https://osv.dev/vulnerability/SUSE-SU-2024:3106-1]
- [https://osv.dev/vulnerability/SUSE-SU-2024:3107-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:1516-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2024-6119]
- [https://osv.dev/vulnerability/USN-6986-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:14317-1]
- [https://security-tracker.debian.org/tracker/CVE-2024-6119]
- [https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-6119.json]
- [https://ubuntu.com/security/notices/USN-6986-1]
- [https://ubuntu.com/security/notices/USN-7894-1]
- [https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-2040.json]
[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]