OpenSSL up to 3.3.0 API SSL_free_buffers use after free

Summaryinfo

A vulnerability was found in OpenSSL up to 1.1.1x/3.0.13/3.1.5/3.2.1/3.3.0. It has been classified as critical. Impacted is the function SSL_free_buffers of the component API. This manipulation causes use after free. This vulnerability is registered as CVE-2024-4741. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability was found in OpenSSL up to 1.1.1x/3.0.13/3.1.5/3.2.1/3.3.0. It has been declared as very critical. Affected by this vulnerability is the function SSL_free_buffers of the component API. The manipulation with an unknown input leads to a use after free vulnerability. The CWE definition for the vulnerability is CWE-416. Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code. As an impact it is known to affect confidentiality, integrity, and availability.

The advisory is shared at openssl.org. This vulnerability is known as CVE-2024-4741 since 05/10/2024. The exploitation appears to be easy. The attack can be launched remotely. The exploitation doesn't need any form of authentication. Technical details are known, but no exploit is available. The price for an exploit might be around USD $5k-$25k at the moment (estimation calculated on 06/22/2026).

The vulnerability scanner Nessus provides a plugin with the ID 209278 (Oracle HTTP Server (October 2024 CPU)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 1.1.1y, 3.0.14, 3.1.6, 3.2.2 or 3.3.1 eliminates this vulnerability.

The vulnerability is also documented in the databases at Tenable (209278) and CERT Bund (WID-SEC-2024-1240). Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Affected

• IBM VIOS
• IBM AIX
• Debian Linux
• Amazon Linux 2
• IBM InfoSphere Information Server
• HPE NonStop Server
• Red Hat Enterprise Linux
• Fedora Linux
• Broadcom Fabric OS
• Ubuntu Linux
• SUSE Linux
• Oracle Linux
• Hitachi Command Suite
• EMC Avamar
• Hitachi Ops Center
• Hitachi Configuration Manager
• NetApp ActiveIQ Unified Manager
• Dell NetWorker
• NetApp AFF
• Xerox FreeFlow Print Server
• IBM Security Guardium
• RESF Rocky Linux
• Open Source OpenSSL
• Dell BIOS
• Meinberg LANTIME
• IBM MQ
• Dell Computer
• Securepoint UTM
• IBM Rational Build Forge
• Insyde UEFI Firmware
• HPE HP-UX
• Red Hat OpenShift
• IBM Rational ClearCase
• IBM Rational ClearQuest
• IBM Spectrum Protect Plus
• NetApp FAS
• IBM Cognos Analytics
• IBM App Connect Enterprise

Productinfo

Type

• Network Encryption Software

Name

• OpenSSL

Version

• 1.1.1x
• 3.0
• 3.0.0
• 3.0.1
• 3.0.2
• 3.0.3
• 3.0.4
• 3.0.5
• 3.0.6
• 3.0.7
• 3.0.8
• 3.0.9
• 3.0.10
• 3.0.11
• 3.0.12
• 3.0.13
• 3.1
• 3.1.0
• 3.1.1
• 3.1.2
• 3.1.3
• 3.1.4
• 3.1.5
• 3.2
• 3.2.0
• 3.2.1
• 3.3.0

License

• open-source

Website

• Product: https://www.openssl.org/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion