openssl-1_1 (SUSE:Manager Proxy 4.3) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Manager Proxy 4.3 package openssl-1_1, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (5)

• CVE-2024-5535 — CVSS 9.1 (critical): Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or…
• CVE-2024-4741 — CVSS 7.5 (high): Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause memory to be accessed that was previously freed in some…
• CVE-2024-2511 — CVSS 5.9 (medium): Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact…
• CVE-2024-0727 — CVSS 5.5 (medium): Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack…
• CVE-2024-13176 — CVSS 4.1 (medium): Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation…