Severity
High
Analysis Summary
CVE-2024-4741
OpenSSL could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free flaw in the SSL_free_buffers API function. By sending a specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition.
Impact
- Code Execution
Indicators of Compromise
CVE
- CVE-2024-4741
Affected Vendors
OpenSSL
Affected Products
- OpenSSL 1.1.1
- OpenSSL 3.0.0
- OpenSSL 3.1.0
- OpenSSL 3.2.0
- OpenSSL 3.3.0
Remediation
Refer to OpenSSL Security Advisory for patch, upgrade or suggested workaround information.