UpHeron
All vulnerabilities

Servers and applications

CVE-2024-0727

Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact summary: Applications loading files in the PKCS12 format from untrusted sources might terminate abruptly. A file in PKCS12 format can contain certificates and keys and may come from an untrusted source. The PKCS12 specification allows certain fields to be…

Severity
Medium 5.5
Published
26 Jan 2024
Last changed
15 Oct 2026
Added to UpHeron
21 Oct 2026
Fixed in
1.0.2zj, 1.1.1x, 3.0.13, 3.1.5
Sources
NVD

Affected software

SoftwareAffected versions
OpenSSLServers and applications · cpe:a:openssl:openssl
  • From 1.0.2 before 1.0.2zj
  • From 1.1.1 before 1.1.1x
  • From 3.0.0 before 3.0.13
  • From 3.1.0 before 3.1.5
  • Version 3.2.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-0727
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-0727