FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-11-06 12:07:22 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
c6f4177c-8e29-11ef-98e7-84a93843eb75	OpenSSL -- OOB memory access vulnerability The OpenSSL project reports: Low-level invalid GF(2^m) parameters lead to OOB memory access (CVE-2024-9143) (Low) Use of the low-level GF(2^m) elliptic curve APIs with untrusted explicit values for the field polynomial can lead to out-of-bounds memory reads or writes. Discovery 2024-10-16 Entry 2024-10-19 openssl < 3.0.15_1,1 openssl31 < 3.1.7_1 openssl32 < 3.2.3_1 openssl33 < 3.3.2_1 openssl-quictls < 3.0.15_1,1 openssl31-quictls < 3.1.7_1 CVE-2024-9143 https://openssl-library.org/news/secadv/20241016.txt

VuXML ID

Description

c6f4177c-8e29-11ef-98e7-84a93843eb75

OpenSSL -- OOB memory access vulnerability

The OpenSSL project reports:

Low-level invalid GF(2^m) parameters lead to OOB memory access (CVE-2024-9143) (Low)

Use of the low-level GF(2^m) elliptic curve APIs with untrusted explicit values for the field polynomial can lead to out-of-bounds memory reads or writes.

Discovery 2024-10-16
Entry 2024-10-19
openssl

< 3.0.15_1,1

openssl31

< 3.1.7_1

openssl32

< 3.2.3_1

openssl33

< 3.3.2_1

openssl-quictls

< 3.0.15_1,1

openssl31-quictls

< 3.1.7_1

CVE-2024-9143
https://openssl-library.org/news/secadv/20241016.txt