CVE-2024-2511
Description
Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial of Service This problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is being used (but not if early_data support is also configured and the default anti-replay protection is in use). In this case, under certain conditions, the session cache can get into an incorrect state and it will fail to flush properly as it fills. The session cache will continue to grow in an unbounded manner. A malicious client could deliberately create the scenario for this failure to force a Denial of Service. It may also happen by accident in normal operation. This issue only affects TLS servers supporting TLSv1.3. It does not affect TLS clients. The FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL 1.0.2 is also not affected by this issue.
How to fix
- OpenSSL OpenSSL3.2.2, 3.1.6, 3.0.14, 1.1.1y or later
- openssl openssl3.0.14, 3.1.6, 3.2.2 or later
- siemens simatic_s7-1500_tm_mfp_firmware1.1.1 or later
- siemens ruggedcom_rm1224_lte\(4g\)_eu_firmware8.2 or later
- siemens ruggedcom_rm1224_lte\(4g\)_nam_firmware8.2 or later
- siemens scalance_m804pb_firmware8.2 or later
- siemens scalance_m812-1_adsl-router_firmware8.2 or later
- siemens scalance_m816-1_adsl-router_firmware8.2 or later
- siemens scalance_m826-2_shdsl-router_firmware8.2 or later
- siemens scalance_m874-2_firmware8.2 or later
- siemens scalance_m874-3_firmware8.2 or later
- siemens scalance_m874-3_3g-router_\(cn\)_firmware8.2 or later
- github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce
- github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d
- github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08
- github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| OpenSSL OpenSSL | 3.2.0 ≤ v < 3.2.2, 3.1.0 ≤ v < 3.1.6, 3.0.0 ≤ v < 3.0.14, 1.1.1 ≤ v < 1.1.1y | 3.2.2, 3.1.6, 3.0.14, 1.1.1y |
| openssl openssl | 1.1.1 ≤ v ≤ 1.1.1x, 3.0.0 ≤ v < 3.0.14, 3.1.0 ≤ v < 3.1.6, 3.2.0 ≤ v < 3.2.2 | 3.0.14, 3.1.6, 3.2.2 |
| debian debian_linux | 11.0 | — |
| netapp a700s_firmware | No range specified | — |
| netapp active_iq_unified_manager | No range specified | — |
| netapp oncommand_workflow_automation | No range specified | — |
| netapp ontap_9 | No range specified | — |
| netapp snapmanager | No range specified | — |
| netapp h300s_firmware | No range specified | — |
| netapp h500s_firmware | No range specified | — |
| netapp h700s_firmware | No range specified | — |
| netapp h410s_firmware | No range specified | — |
| netapp h410c_firmware | No range specified | — |
| netapp bootstrap_os | No range specified | — |
| netapp a250_firmware | No range specified | — |
| netapp 500f_firmware | No range specified | — |
| netapp c250_firmware | No range specified | — |
| siemens simatic_s7-1500_tm_mfp_firmware | v < 1.1.1 | 1.1.1 |
| siemens ruggedcom_rm1224_lte\(4g\)_eu_firmware | v < 8.2 | 8.2 |
| siemens ruggedcom_rm1224_lte\(4g\)_nam_firmware | v < 8.2 | 8.2 |
| siemens scalance_m804pb_firmware | v < 8.2 | 8.2 |
| siemens scalance_m812-1_adsl-router_firmware | v < 8.2 | 8.2 |
| siemens scalance_m816-1_adsl-router_firmware | v < 8.2 | 8.2 |
| siemens scalance_m826-2_shdsl-router_firmware | v < 8.2 | 8.2 |
| siemens scalance_m874-2_firmware | v < 8.2 | 8.2 |
| siemens scalance_m874-3_firmware | v < 8.2 | 8.2 |
| siemens scalance_m874-3_3g-router_\(cn\)_firmware | v < 8.2 | 8.2 |
| siemens scalance_m876-3_firmware | v < 8.2 | 8.2 |
| siemens scalance_m876-3_\(rok\)_firmware | v < 8.2 | 8.2 |
| siemens scalance_m876-4_firmware | v < 8.2 | 8.2 |
| siemens scalance_m876-4_\(eu\)_firmware | v < 8.2 | 8.2 |
| siemens scalance_m876-4_\(nam\)_firmware | v < 8.2 | 8.2 |
| siemens scalance_mum853-1_\(a1\)_firmware | v < 8.2 | 8.2 |
| siemens scalance_mum853-1_\(b1\)_firmware | v < 8.2 | 8.2 |
| siemens scalance_mum853-1_\(eu\)_firmware | v < 8.2 | 8.2 |
| siemens scalance_mum856-1_\(a1\)_firmware | v < 8.2 | 8.2 |
| siemens scalance_mum856-1_\(b1\)_firmware | v < 8.2 | 8.2 |
| siemens scalance_mum856-1_\(cn\)_firmware | v < 8.2 | 8.2 |
| siemens scalance_mum856-1_\(eu\)_firmware | v < 8.2 | 8.2 |
| siemens scalance_mum856-1_\(row\)_firmware | v < 8.2 | 8.2 |
| siemens scalance_s615_eec_lan-router_firmware | v < 8.2 | 8.2 |
| siemens scalance_s615_lan-router_firmware | v < 8.2 | 8.2 |
| siemens simatic_s7-1500_cpu_1518-4_pn\/dp_firmware | 3.1.0 ≤ v < 3.1.5 | 3.1.5 |
| siemens sinec_os | v < 3.1 | 3.1 |
| siemens scalance_wab762-1_firmware | v < 3.0.0 | 3.0.0 |
| siemens scalance_wam763-1_firmware | v < 3.0.0 | 3.0.0 |
| siemens scalance_wam766-1_firmware | v < 3.0.0 | 3.0.0 |
| siemens scalance_wub762-1_firmware | v < 3.0.0 | 3.0.0 |
| siemens scalance_wub762-1_ifeatures_firmware | v < 3.0.0 | 3.0.0 |
| siemens scalance_wum763-1_firmware | v < 3.0.0 | 3.0.0 |
| siemens scalance_wum766-1_firmware | v < 3.0.0 | 3.0.0 |
| siemens sinec_ins | v < 1.0, 1.0 | 1.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.