https://seclists.org/oss-sec/2024/q4/37: CVE-2024-9143: OpenSSL: Low-level invalid GF(2^m) parameters lead to OOB memory access
Published Oct 23, 2024
·Updated
Affected Software
1 affected component
OpenSSL OpenSSL
Frequently Asked Questions
1
What is the severity of CVE-2024-9143?
The severity of CVE-2024-9143 is categorized as low.
2
How do I fix CVE-2024-9143?
To fix CVE-2024-9143, ensure you update OpenSSL to the latest version that addresses this vulnerability.
3
What are the consequences of CVE-2024-9143?
CVE-2024-9143 can lead to out-of-bounds memory access, potentially causing application crashes or undefined behavior.
4
Which versions of OpenSSL are affected by CVE-2024-9143?
OpenSSL versions containing the low-level GF(2^m) parameters are affected by CVE-2024-9143.
5
Is there a workaround for CVE-2024-9143 until I can update OpenSSL?
There is no official workaround for CVE-2024-9143 other than upgrading to the patched version of OpenSSL.