[UPDATE] [medium] OpenSSL: Vulnerability enables denial of service and information disclosure

A remote, authenticated attacker can exploit a vulnerability in OpenSSL to perform a denial of service attack and disclose information.

CSIRTS triage

What: A remote authenticated attacker can perform denial of service and disclose information in OpenSSL.
Who is affected: Systems running OpenSSL with remote authenticated access exposure.
Urgency: Medium severity; requires authenticated access, limiting exploitation scope.
Action: Update OpenSSL to patched version addressing CVE-2024-5535.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch OpenSSL

Get an email when a new OpenSSL advisory drops — max one per day, one-click unsubscribe.

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Moderate exploitation riskCVE-2024-55355.6% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 92% of all EPSS-scored CVEs.

CVE	CSIRTS overview	External
CVE-2024-5535	coverage & exploitation status	NVD · CVE.org

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.