CVE-2024-25115.9MediumCWE-1325

CVE-2024-2511: Unbounded memory growth with session handling in TLSv1.3

OpenSSL

Vendor fix available · Affected: OpenSSL · Exploitation: likely to be exploited (10% or more)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

59.3%probability of exploitation in the next 30 days

99th percentile

050100

Higher than 99% of scored CVEs

5.9MediumCVSS 3.1

LowMediumHighCrit.

DescriptionCVE.org

Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial of Service This problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is being used (but not if early_data support is also configured and the default anti-replay protection is in use). In this case, under certain conditions, the session cache can get into an incorrect state and it will fail to flush properly as it fills. The session cache will continue to grow in an unbounded manner. A malicious client could deliberately create the scenario for this failure to force a Denial of Service. It may also happen by accident in normal operation. This issue only affects TLS servers supporting TLSv1.3. It does not affect TLS clients. The FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL 1.0.2 is also not affected by this issue.

Affected products1

From the CVE record. A product or version that is not listed is unknown, not unaffected.

OpenSSL · OpenSSLfrom 3.2.0 before 3.2.2; from 3.1.0 before 3.1.6; from 3.0.0 before 3.0.14; from 1.1.1 before 1.1.1y

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Likely to be exploited (10% or more). EPSS gives it a 10% or higher chance of exploitation in the next 30 days.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Improperly Controlled Sequential Memory Allocation · Denial of Service
Vendor: OpenSSL
Published: April 2024
Band: Likely to be exploited (10% or more), April 2024
Bounty reports: 1 disclosed on HackerOne

Disclosed bug bounty reports about CVE-2024-2511

The reports on HackerOne that name this CVE, with HackerOne's own outcome. Titles and metadata only.

Unbounded memory growth with session handling in TLSv1.3Internet Bug Bounty · 2024 · low severityValid

CoverageNo articles yet

No CyberSIXT article names CVE-2024-2511 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.

References

3 more references are in the CVE record.