OESA-2024-1531

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1531

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2024-1531.json

JSON Data

https://api.osv.dev/v1/vulns/OESA-2024-1531

Upstream

CVE-2024-2511

Published

2024-05-10T11:07:53Z

Modified

2025-09-03T06:20:06.189041Z

Summary

openssl security update

Details

The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols as well as a full-strength general purpose cryptography library. The project is managed by a worldwide community of volunteers that use the Internet to communicate, plan, and develop the OpenSSL tookit and its related documentation.

Security Fix(es):

Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions

Impact summary: An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial of Service

This problem can occur in TLSv1.3 if the non-default SSLOPNOTICKET option is being used (but not if earlydata support is also configured and the default anti-replay protection is in use). In this case, under certain conditions, the session cache can get into an incorrect state and it will fail to flush properly as it fills. The session cache will continue to grow in an unbounded manner. A malicious client could deliberately create the scenario for this failure to force a Denial of Service. It may also happen by accident in normal operation.

This issue only affects TLS servers supporting TLSv1.3. It does not affect TLS clients.

The FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL 1.0.2 is also not affected by this issue.(CVE-2024-2511)

Database specific

{
    "severity": "Medium"
}

References

Affected packages

openEuler:20.03-LTS-SP1 / openssl

Package

Name: openssl
Purl: pkg:rpm/openEuler/openssl&distro=openEuler-20.03-LTS-SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.1.1f-33.oe1

Ecosystem specific

{
    "noarch": [
        "openssl-help-1.1.1f-33.oe1.noarch.rpm"
    ],
    "src": [
        "openssl-1.1.1f-33.oe1.src.rpm"
    ],
    "aarch64": [
        "openssl-debugsource-1.1.1f-33.oe1.aarch64.rpm",
        "openssl-debuginfo-1.1.1f-33.oe1.aarch64.rpm",
        "openssl-1.1.1f-33.oe1.aarch64.rpm",
        "openssl-devel-1.1.1f-33.oe1.aarch64.rpm",
        "openssl-libs-1.1.1f-33.oe1.aarch64.rpm"
    ],
    "x86_64": [
        "openssl-debuginfo-1.1.1f-33.oe1.x86_64.rpm",
        "openssl-devel-1.1.1f-33.oe1.x86_64.rpm",
        "openssl-libs-1.1.1f-33.oe1.x86_64.rpm",
        "openssl-debugsource-1.1.1f-33.oe1.x86_64.rpm",
        "openssl-1.1.1f-33.oe1.x86_64.rpm"
    ]
}

openEuler:20.03-LTS-SP4 / openssl

Package

Name: openssl
Purl: pkg:rpm/openEuler/openssl&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.1.1f-33.oe2003sp4

Ecosystem specific

{
    "noarch": [
        "openssl-help-1.1.1f-33.oe2003sp4.noarch.rpm"
    ],
    "src": [
        "openssl-1.1.1f-33.oe2003sp4.src.rpm"
    ],
    "aarch64": [
        "openssl-debugsource-1.1.1f-33.oe2003sp4.aarch64.rpm",
        "openssl-1.1.1f-33.oe2003sp4.aarch64.rpm",
        "openssl-debuginfo-1.1.1f-33.oe2003sp4.aarch64.rpm",
        "openssl-devel-1.1.1f-33.oe2003sp4.aarch64.rpm",
        "openssl-libs-1.1.1f-33.oe2003sp4.aarch64.rpm"
    ],
    "x86_64": [
        "openssl-debugsource-1.1.1f-33.oe2003sp4.x86_64.rpm",
        "openssl-libs-1.1.1f-33.oe2003sp4.x86_64.rpm",
        "openssl-devel-1.1.1f-33.oe2003sp4.x86_64.rpm",
        "openssl-1.1.1f-33.oe2003sp4.x86_64.rpm",
        "openssl-debuginfo-1.1.1f-33.oe2003sp4.x86_64.rpm"
    ]
}

openEuler:22.03-LTS / openssl

Package

Name: openssl
Purl: pkg:rpm/openEuler/openssl&distro=openEuler-22.03-LTS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.1.1wa-6.oe2203sp3

Ecosystem specific

{
    "noarch": [
        "openssl-help-1.1.1m-28.oe2203.noarch.rpm",
        "openssl-help-1.1.1m-34.oe2203sp1.noarch.rpm",
        "openssl-help-1.1.1m-35.oe2203sp2.noarch.rpm",
        "openssl-help-1.1.1wa-6.oe2203sp3.noarch.rpm"
    ],
    "src": [
        "openssl-1.1.1m-28.oe2203.src.rpm",
        "openssl-1.1.1m-34.oe2203sp1.src.rpm",
        "openssl-1.1.1m-35.oe2203sp2.src.rpm",
        "openssl-1.1.1wa-6.oe2203sp3.src.rpm"
    ],
    "aarch64": [
        "openssl-debuginfo-1.1.1m-28.oe2203.aarch64.rpm",
        "openssl-libs-1.1.1m-28.oe2203.aarch64.rpm",
        "openssl-devel-1.1.1m-28.oe2203.aarch64.rpm",
        "openssl-debugsource-1.1.1m-28.oe2203.aarch64.rpm",
        "openssl-perl-1.1.1m-28.oe2203.aarch64.rpm",
        "openssl-1.1.1m-28.oe2203.aarch64.rpm",
        "openssl-debuginfo-1.1.1m-34.oe2203sp1.aarch64.rpm",
        "openssl-perl-1.1.1m-34.oe2203sp1.aarch64.rpm",
        "openssl-libs-1.1.1m-34.oe2203sp1.aarch64.rpm",
        "openssl-1.1.1m-34.oe2203sp1.aarch64.rpm",
        "openssl-debugsource-1.1.1m-34.oe2203sp1.aarch64.rpm",
        "openssl-devel-1.1.1m-34.oe2203sp1.aarch64.rpm",
        "openssl-perl-1.1.1m-35.oe2203sp2.aarch64.rpm",
        "openssl-devel-1.1.1m-35.oe2203sp2.aarch64.rpm",
        "openssl-libs-1.1.1m-35.oe2203sp2.aarch64.rpm",
        "openssl-debugsource-1.1.1m-35.oe2203sp2.aarch64.rpm",
        "openssl-debuginfo-1.1.1m-35.oe2203sp2.aarch64.rpm",
        "openssl-1.1.1m-35.oe2203sp2.aarch64.rpm",
        "openssl-perl-1.1.1wa-6.oe2203sp3.aarch64.rpm",
        "openssl-libs-1.1.1wa-6.oe2203sp3.aarch64.rpm",
        "openssl-debuginfo-1.1.1wa-6.oe2203sp3.aarch64.rpm",
        "openssl-debugsource-1.1.1wa-6.oe2203sp3.aarch64.rpm",
        "openssl-1.1.1wa-6.oe2203sp3.aarch64.rpm",
        "openssl-devel-1.1.1wa-6.oe2203sp3.aarch64.rpm"
    ],
    "x86_64": [
        "openssl-1.1.1m-28.oe2203.x86_64.rpm",
        "openssl-devel-1.1.1m-28.oe2203.x86_64.rpm",
        "openssl-perl-1.1.1m-28.oe2203.x86_64.rpm",
        "openssl-libs-1.1.1m-28.oe2203.x86_64.rpm",
        "openssl-debuginfo-1.1.1m-28.oe2203.x86_64.rpm",
        "openssl-debugsource-1.1.1m-28.oe2203.x86_64.rpm",
        "openssl-libs-1.1.1m-34.oe2203sp1.x86_64.rpm",
        "openssl-perl-1.1.1m-34.oe2203sp1.x86_64.rpm",
        "openssl-debugsource-1.1.1m-34.oe2203sp1.x86_64.rpm",
        "openssl-debuginfo-1.1.1m-34.oe2203sp1.x86_64.rpm",
        "openssl-1.1.1m-34.oe2203sp1.x86_64.rpm",
        "openssl-devel-1.1.1m-34.oe2203sp1.x86_64.rpm",
        "openssl-devel-1.1.1m-35.oe2203sp2.x86_64.rpm",
        "openssl-1.1.1m-35.oe2203sp2.x86_64.rpm",
        "openssl-debuginfo-1.1.1m-35.oe2203sp2.x86_64.rpm",
        "openssl-debugsource-1.1.1m-35.oe2203sp2.x86_64.rpm",
        "openssl-perl-1.1.1m-35.oe2203sp2.x86_64.rpm",
        "openssl-libs-1.1.1m-35.oe2203sp2.x86_64.rpm",
        "openssl-1.1.1wa-6.oe2203sp3.x86_64.rpm",
        "openssl-devel-1.1.1wa-6.oe2203sp3.x86_64.rpm",
        "openssl-debuginfo-1.1.1wa-6.oe2203sp3.x86_64.rpm",
        "openssl-debugsource-1.1.1wa-6.oe2203sp3.x86_64.rpm",
        "openssl-perl-1.1.1wa-6.oe2203sp3.x86_64.rpm",
        "openssl-libs-1.1.1wa-6.oe2203sp3.x86_64.rpm"
    ]
}

openEuler:22.03-LTS-SP1 / openssl

Package

Name: openssl
Purl: pkg:rpm/openEuler/openssl&distro=openEuler-22.03-LTS-SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.1.1m-34.oe2203sp1

Ecosystem specific

{
    "noarch": [
        "openssl-help-1.1.1m-34.oe2203sp1.noarch.rpm"
    ],
    "src": [
        "openssl-1.1.1m-34.oe2203sp1.src.rpm"
    ],
    "aarch64": [
        "openssl-debuginfo-1.1.1m-34.oe2203sp1.aarch64.rpm",
        "openssl-perl-1.1.1m-34.oe2203sp1.aarch64.rpm",
        "openssl-libs-1.1.1m-34.oe2203sp1.aarch64.rpm",
        "openssl-1.1.1m-34.oe2203sp1.aarch64.rpm",
        "openssl-debugsource-1.1.1m-34.oe2203sp1.aarch64.rpm",
        "openssl-devel-1.1.1m-34.oe2203sp1.aarch64.rpm"
    ],
    "x86_64": [
        "openssl-libs-1.1.1m-34.oe2203sp1.x86_64.rpm",
        "openssl-perl-1.1.1m-34.oe2203sp1.x86_64.rpm",
        "openssl-debugsource-1.1.1m-34.oe2203sp1.x86_64.rpm",
        "openssl-debuginfo-1.1.1m-34.oe2203sp1.x86_64.rpm",
        "openssl-1.1.1m-34.oe2203sp1.x86_64.rpm",
        "openssl-devel-1.1.1m-34.oe2203sp1.x86_64.rpm"
    ]
}

openEuler:22.03-LTS-SP2 / openssl

Package

Name: openssl
Purl: pkg:rpm/openEuler/openssl&distro=openEuler-22.03-LTS-SP2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.1.1m-35.oe2203sp2

Ecosystem specific

{
    "noarch": [
        "openssl-help-1.1.1m-35.oe2203sp2.noarch.rpm"
    ],
    "src": [
        "openssl-1.1.1m-35.oe2203sp2.src.rpm"
    ],
    "aarch64": [
        "openssl-perl-1.1.1m-35.oe2203sp2.aarch64.rpm",
        "openssl-devel-1.1.1m-35.oe2203sp2.aarch64.rpm",
        "openssl-libs-1.1.1m-35.oe2203sp2.aarch64.rpm",
        "openssl-debugsource-1.1.1m-35.oe2203sp2.aarch64.rpm",
        "openssl-debuginfo-1.1.1m-35.oe2203sp2.aarch64.rpm",
        "openssl-1.1.1m-35.oe2203sp2.aarch64.rpm"
    ],
    "x86_64": [
        "openssl-devel-1.1.1m-35.oe2203sp2.x86_64.rpm",
        "openssl-1.1.1m-35.oe2203sp2.x86_64.rpm",
        "openssl-debuginfo-1.1.1m-35.oe2203sp2.x86_64.rpm",
        "openssl-debugsource-1.1.1m-35.oe2203sp2.x86_64.rpm",
        "openssl-perl-1.1.1m-35.oe2203sp2.x86_64.rpm",
        "openssl-libs-1.1.1m-35.oe2203sp2.x86_64.rpm"
    ]
}

openEuler:22.03-LTS-SP3 / openssl

Package

Name: openssl
Purl: pkg:rpm/openEuler/openssl&distro=openEuler-22.03-LTS-SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.1.1wa-6.oe2203sp3

Ecosystem specific

{
    "noarch": [
        "openssl-help-1.1.1wa-6.oe2203sp3.noarch.rpm"
    ],
    "src": [
        "openssl-1.1.1wa-6.oe2203sp3.src.rpm"
    ],
    "aarch64": [
        "openssl-perl-1.1.1wa-6.oe2203sp3.aarch64.rpm",
        "openssl-libs-1.1.1wa-6.oe2203sp3.aarch64.rpm",
        "openssl-debuginfo-1.1.1wa-6.oe2203sp3.aarch64.rpm",
        "openssl-debugsource-1.1.1wa-6.oe2203sp3.aarch64.rpm",
        "openssl-1.1.1wa-6.oe2203sp3.aarch64.rpm",
        "openssl-devel-1.1.1wa-6.oe2203sp3.aarch64.rpm"
    ],
    "x86_64": [
        "openssl-1.1.1wa-6.oe2203sp3.x86_64.rpm",
        "openssl-devel-1.1.1wa-6.oe2203sp3.x86_64.rpm",
        "openssl-debuginfo-1.1.1wa-6.oe2203sp3.x86_64.rpm",
        "openssl-debugsource-1.1.1wa-6.oe2203sp3.x86_64.rpm",
        "openssl-perl-1.1.1wa-6.oe2203sp3.x86_64.rpm",
        "openssl-libs-1.1.1wa-6.oe2203sp3.x86_64.rpm"
    ]
}