https://seclists.org/oss-sec/2025/q1/123: CVE-2024-12797: OpenSSL: RFC7250 handshakes with unauthenticated servers don't abort as expected
Published Feb 11, 2025
·Updated
Affected Software
1 affected component
OpenSSL OpenSSL
Frequently Asked Questions
1
What is the severity of CVE-2024-12797?
CVE-2024-12797 has been classified as a moderate severity vulnerability.
2
How do I fix CVE-2024-12797?
To fix CVE-2024-12797, upgrade OpenSSL to version 3.3.3 or later.
3
What version of OpenSSL is affected by CVE-2024-12797?
OpenSSL 3.3 is affected by CVE-2024-12797.
4
What type of vulnerability is CVE-2024-12797?
CVE-2024-12797 is a handshake issue that allows unauthenticated server connections without the expected abort.
5
When was CVE-2024-12797 published?
CVE-2024-12797 was published on February 11, 2025.