https://seclists.org/oss-sec/2024/q4/38: CVE-2024-9143: OpenSSL: Low-level invalid GF(2^m) parameters lead to OOB memory access
Published Oct 24, 2024
·Updated
Affected Software
1 affected component
OpenSSL OpenSSL
Frequently Asked Questions
1
What is the severity of CVE-2024-9143?
CVE-2024-9143 has a low severity rating due to its specific nature of causing out-of-bounds memory access.
2
How do I fix CVE-2024-9143?
To fix CVE-2024-9143, upgrade to the latest version of OpenSSL where the vulnerability has been patched.
3
What systems are affected by CVE-2024-9143?
CVE-2024-9143 affects versions of OpenSSL that utilize low-level GF(2^m) parameters.
4
What techniques are exploited in CVE-2024-9143?
CVE-2024-9143 exploits improper validation of low-level GF(2^m) parameters leading to out-of-bounds memory access.
5
Is CVE-2024-9143 exploitable remotely?
CVE-2024-9143's exploitability depends on the application's usage of vulnerable OpenSSL functions, it may be exploitable in specific scenarios.