CVE-2024-53379
High
Description
Heap buffer overflow in the server site handshake implementation in Real Time Logic LLC's SharkSSL version (from 05/05/24) commit 64808a5e12c83b38f85c943dee0112e428dc2a43 allows a remote attacker to trigger a Denial-of-Service via a malformed Client-Hello message.
SeverityHigh
CVSS7.5
Exploit probability—
ProductSharkSSL
PublishedJan 23, 2025
First seenJan 23, 2025
Weakness typeCWE-120CWE-120
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Real Time Logic LLC SharkSSL | commit 64808a5e12c83b38f85c943dee0112e428dc2a43 ≤ v | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.