CVE-2024-0901: SEGV and out of bounds memory read from malicious packet
Published Mar 25, 2024
·Updated
Remotely executed SEGV and out of bounds read allows malicious packet sender to crash or cause an out of bounds read via sending a malformed packet with the correct length.
Other sources
SEGV and out of bounds memory read from malicious packet
— Microsoft
Affected Software
2 affected componentsFixes available
wolfSSL wolfssl>=3.12.2<=5.6.6
Microsoft azl3 mariadb 10.11.6-3
Remediation
Information
Update wolfSSL to 5.7.0 or apply the fix located in: https://github.com/wolfSSL/wolfssl/pull/7099 .
Patch Available
Event History
Mar 25, 2024
CVE Published
via MITRE·10:37 PM
Data Sourced
via MITRE·10:37 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·11:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Jun 30, 2024
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·02:00 PM
Affected Software
Updated
via Microsoft·02:00 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2024-0901?
CVE-2024-0901 has a high severity level due to its potential for remote code execution and denial of service.
2
How do I fix CVE-2024-0901?
To fix CVE-2024-0901, update wolfSSL to a version later than 5.6.6.
3
What type of vulnerability is CVE-2024-0901?
CVE-2024-0901 is a vulnerability that allows remote execution of SEGV and out of bounds read through malformed packets.
4
Which versions of wolfSSL are affected by CVE-2024-0901?
CVE-2024-0901 affects wolfSSL versions between 3.12.2 and 5.6.6 inclusive.
5
How does CVE-2024-0901 impact application security?
CVE-2024-0901 can lead to application crashes and expose sensitive data through out of bounds memory read.