Test ID:	1.3.6.1.4.1.25623.1.0.114676
Category:	General
Title:	OpenSSL Buffer Overread Vulnerability (20240627) - Windows
Summary:	OpenSSL is prone to a buffer overread vulnerability.
Description:	Summary: OpenSSL is prone to a buffer overread vulnerability. Vulnerability Insight: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer. Vulnerability Impact: A buffer overread can have a range of potential consequences such as unexpected application behaviour or a crash. Affected Software/OS: OpenSSL versions 1.0.2, 1.1.1, 3.0, 3.1, 3.2 and 3.3. Solution: Update to version 1.0.2zk, 1.1.1za, 3.0.15, 3.1.7, 3.2.3, 3.3.2 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2024-5535
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.