Analysis Summary

CVE-2024-4741

OpenSSL could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free flaw in the SSL_free_buffers API function. By sending a specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition.

Impact

• Code Execution

Indicators of Compromise

CVE

• CVE-2024-4741

Affected Vendors

Affected Products

• OpenSSL 1.1.1
• OpenSSL 3.0.0
• OpenSSL 3.1.0
• OpenSSL 3.2.0
• OpenSSL 3.3.0

Remediation

Refer to OpenSSL Security Advisory for patch, upgrade or suggested workaround information.

OpenSSL Security Advisory