{ "document": { "aggregate_severity": { "text": "Medium" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_alt_common/debian13/vex/2024/cve-2024-4741-els_alt_common-debian13.json" } ], "tracking": { "current_release_date": "2026-10-18T19:16:31Z", "generator": { "date": "2026-10-18T19:16:31Z", "engine": { "name": "pyCSAF" } }, "id": "CVE-2024-4741-ELS_ALT_COMMON-DEBIAN13", "initial_release_date": "2024-11-13T11:15:00Z", "revision_history": [ { "date": "2024-11-13T11:15:00Z", "number": "1", "summary": "Initial version" }, { "date": "2026-10-18T19:16:31Z", "number": "2", "summary": "Official Publication" } ], "status": "final", "version": "2" }, "title": "Security update on CVE-2024-4741" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Debian 13", "product": { "name": "Debian 13", "product_id": "Debian-13", "product_identification_helper": { "cpe": "cpe:2.3:o:debian:debian_linux:13:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Debian" } ], "category": "vendor", "name": "Software in the Public Interest, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "alt-openssl-libs-0:1.1.1w-3.2.arm64", "product": { "name": "alt-openssl-libs-0:1.1.1w-3.2.arm64", "product_id": "alt-openssl-libs-0:1.1.1w-3.2.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl-libs@1.1.1w-3.2?arch=arm64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl-libs-0:1.1.1w-3.5.arm64", "product": { "name": "alt-openssl-libs-0:1.1.1w-3.5.arm64", "product_id": "alt-openssl-libs-0:1.1.1w-3.5.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl-libs@1.1.1w-3.5?arch=arm64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl-libs-0:1.1.1w-3.1.arm64", "product": { "name": "alt-openssl-libs-0:1.1.1w-3.1.arm64", "product_id": "alt-openssl-libs-0:1.1.1w-3.1.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl-libs@1.1.1w-3.1?arch=arm64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl-libs-0:1.1.1w-3.4.arm64", "product": { "name": "alt-openssl-libs-0:1.1.1w-3.4.arm64", "product_id": "alt-openssl-libs-0:1.1.1w-3.4.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl-libs@1.1.1w-3.4?arch=arm64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl-0:1.1.1w-3.4.arm64", "product": { "name": "alt-openssl-0:1.1.1w-3.4.arm64", "product_id": "alt-openssl-0:1.1.1w-3.4.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl@1.1.1w-3.4?arch=arm64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl-0:1.1.1w-3.1.arm64", "product": { "name": "alt-openssl-0:1.1.1w-3.1.arm64", "product_id": "alt-openssl-0:1.1.1w-3.1.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl@1.1.1w-3.1?arch=arm64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl-0:1.1.1w-3.5.arm64", "product": { "name": "alt-openssl-0:1.1.1w-3.5.arm64", "product_id": "alt-openssl-0:1.1.1w-3.5.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl@1.1.1w-3.5?arch=arm64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl-0:1.1.1w-3.2.arm64", "product": { "name": "alt-openssl-0:1.1.1w-3.2.arm64", "product_id": "alt-openssl-0:1.1.1w-3.2.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl@1.1.1w-3.2?arch=arm64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl11-dev-0:1.1.1w-3.7.arm64", "product": { "name": "alt-openssl11-dev-0:1.1.1w-3.7.arm64", "product_id": "alt-openssl11-dev-0:1.1.1w-3.7.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl11-dev@1.1.1w-3.7?arch=arm64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl11-dev-0:1.1.1w-3.10.arm64", "product": { "name": "alt-openssl11-dev-0:1.1.1w-3.10.arm64", "product_id": "alt-openssl11-dev-0:1.1.1w-3.10.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl11-dev@1.1.1w-3.10?arch=arm64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl11-dev-0:1.1.1w-3.11.arm64", "product": { "name": "alt-openssl11-dev-0:1.1.1w-3.11.arm64", "product_id": "alt-openssl11-dev-0:1.1.1w-3.11.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl11-dev@1.1.1w-3.11?arch=arm64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl11-0:1.1.1w-3.7.arm64", "product": { "name": "alt-openssl11-0:1.1.1w-3.7.arm64", "product_id": "alt-openssl11-0:1.1.1w-3.7.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl11@1.1.1w-3.7?arch=arm64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl11-0:1.1.1w-3.10.arm64", "product": { "name": "alt-openssl11-0:1.1.1w-3.10.arm64", "product_id": "alt-openssl11-0:1.1.1w-3.10.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl11@1.1.1w-3.10?arch=arm64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl11-0:1.1.1w-3.11.arm64", "product": { "name": "alt-openssl11-0:1.1.1w-3.11.arm64", "product_id": "alt-openssl11-0:1.1.1w-3.11.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl11@1.1.1w-3.11?arch=arm64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl11-libs-0:1.1.1w-3.7.arm64", "product": { "name": "alt-openssl11-libs-0:1.1.1w-3.7.arm64", "product_id": "alt-openssl11-libs-0:1.1.1w-3.7.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl11-libs@1.1.1w-3.7?arch=arm64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl11-libs-0:1.1.1w-3.10.arm64", "product": { "name": "alt-openssl11-libs-0:1.1.1w-3.10.arm64", "product_id": "alt-openssl11-libs-0:1.1.1w-3.10.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl11-libs@1.1.1w-3.10?arch=arm64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl11-libs-0:1.1.1w-3.11.arm64", "product": { "name": "alt-openssl11-libs-0:1.1.1w-3.11.arm64", "product_id": "alt-openssl11-libs-0:1.1.1w-3.11.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl11-libs@1.1.1w-3.11?arch=arm64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl-dev-0:1.1.1w-3.1.arm64", "product": { "name": "alt-openssl-dev-0:1.1.1w-3.1.arm64", "product_id": "alt-openssl-dev-0:1.1.1w-3.1.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl-dev@1.1.1w-3.1?arch=arm64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl-dev-0:1.1.1w-3.5.arm64", "product": { "name": "alt-openssl-dev-0:1.1.1w-3.5.arm64", "product_id": "alt-openssl-dev-0:1.1.1w-3.5.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl-dev@1.1.1w-3.5?arch=arm64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl-dev-0:1.1.1w-3.2.arm64", "product": { "name": "alt-openssl-dev-0:1.1.1w-3.2.arm64", "product_id": "alt-openssl-dev-0:1.1.1w-3.2.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl-dev@1.1.1w-3.2?arch=arm64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl-dev-0:1.1.1w-3.4.arm64", "product": { "name": "alt-openssl-dev-0:1.1.1w-3.4.arm64", "product_id": "alt-openssl-dev-0:1.1.1w-3.4.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl-dev@1.1.1w-3.4?arch=arm64&os_name=debian&os_version=13" } } } ], "category": "architecture", "name": "arm64" }, { "branches": [ { "category": "product_version", "name": "alt-openssl-libs-0:1.1.1w-3.2.amd64", "product": { "name": "alt-openssl-libs-0:1.1.1w-3.2.amd64", "product_id": "alt-openssl-libs-0:1.1.1w-3.2.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl-libs@1.1.1w-3.2?arch=amd64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl-libs-0:1.1.1w-3.5.amd64", "product": { "name": "alt-openssl-libs-0:1.1.1w-3.5.amd64", "product_id": "alt-openssl-libs-0:1.1.1w-3.5.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl-libs@1.1.1w-3.5?arch=amd64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl-libs-0:1.1.1w-3.1.amd64", "product": { "name": "alt-openssl-libs-0:1.1.1w-3.1.amd64", "product_id": "alt-openssl-libs-0:1.1.1w-3.1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl-libs@1.1.1w-3.1?arch=amd64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl-libs-0:1.1.1w-3.4.amd64", "product": { "name": "alt-openssl-libs-0:1.1.1w-3.4.amd64", "product_id": "alt-openssl-libs-0:1.1.1w-3.4.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl-libs@1.1.1w-3.4?arch=amd64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl-0:1.1.1w-3.4.amd64", "product": { "name": "alt-openssl-0:1.1.1w-3.4.amd64", "product_id": "alt-openssl-0:1.1.1w-3.4.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl@1.1.1w-3.4?arch=amd64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl-0:1.1.1w-3.1.amd64", "product": { "name": "alt-openssl-0:1.1.1w-3.1.amd64", "product_id": "alt-openssl-0:1.1.1w-3.1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl@1.1.1w-3.1?arch=amd64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl-0:1.1.1w-3.5.amd64", "product": { "name": "alt-openssl-0:1.1.1w-3.5.amd64", "product_id": "alt-openssl-0:1.1.1w-3.5.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl@1.1.1w-3.5?arch=amd64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl-0:1.1.1w-3.2.amd64", "product": { "name": "alt-openssl-0:1.1.1w-3.2.amd64", "product_id": "alt-openssl-0:1.1.1w-3.2.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl@1.1.1w-3.2?arch=amd64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl11-dev-0:1.1.1w-3.7.amd64", "product": { "name": "alt-openssl11-dev-0:1.1.1w-3.7.amd64", "product_id": "alt-openssl11-dev-0:1.1.1w-3.7.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl11-dev@1.1.1w-3.7?arch=amd64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl11-dev-0:1.1.1w-3.10.amd64", "product": { "name": "alt-openssl11-dev-0:1.1.1w-3.10.amd64", "product_id": "alt-openssl11-dev-0:1.1.1w-3.10.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl11-dev@1.1.1w-3.10?arch=amd64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl11-dev-0:1.1.1w-3.11.amd64", "product": { "name": "alt-openssl11-dev-0:1.1.1w-3.11.amd64", "product_id": "alt-openssl11-dev-0:1.1.1w-3.11.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl11-dev@1.1.1w-3.11?arch=amd64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl11-dev-0:1.1.1w-3.8.amd64", "product": { "name": "alt-openssl11-dev-0:1.1.1w-3.8.amd64", "product_id": "alt-openssl11-dev-0:1.1.1w-3.8.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl11-dev@1.1.1w-3.8?arch=amd64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl11-0:1.1.1w-3.7.amd64", "product": { "name": "alt-openssl11-0:1.1.1w-3.7.amd64", "product_id": "alt-openssl11-0:1.1.1w-3.7.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl11@1.1.1w-3.7?arch=amd64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl11-0:1.1.1w-3.10.amd64", "product": { "name": "alt-openssl11-0:1.1.1w-3.10.amd64", "product_id": "alt-openssl11-0:1.1.1w-3.10.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl11@1.1.1w-3.10?arch=amd64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl11-0:1.1.1w-3.8.amd64", "product": { "name": "alt-openssl11-0:1.1.1w-3.8.amd64", "product_id": "alt-openssl11-0:1.1.1w-3.8.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl11@1.1.1w-3.8?arch=amd64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl11-0:1.1.1w-3.11.amd64", "product": { "name": "alt-openssl11-0:1.1.1w-3.11.amd64", "product_id": "alt-openssl11-0:1.1.1w-3.11.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl11@1.1.1w-3.11?arch=amd64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl11-libs-0:1.1.1w-3.7.amd64", "product": { "name": "alt-openssl11-libs-0:1.1.1w-3.7.amd64", "product_id": "alt-openssl11-libs-0:1.1.1w-3.7.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl11-libs@1.1.1w-3.7?arch=amd64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl11-libs-0:1.1.1w-3.10.amd64", "product": { "name": "alt-openssl11-libs-0:1.1.1w-3.10.amd64", "product_id": "alt-openssl11-libs-0:1.1.1w-3.10.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl11-libs@1.1.1w-3.10?arch=amd64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl11-libs-0:1.1.1w-3.11.amd64", "product": { "name": "alt-openssl11-libs-0:1.1.1w-3.11.amd64", "product_id": "alt-openssl11-libs-0:1.1.1w-3.11.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl11-libs@1.1.1w-3.11?arch=amd64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl11-libs-0:1.1.1w-3.8.amd64", "product": { "name": "alt-openssl11-libs-0:1.1.1w-3.8.amd64", "product_id": "alt-openssl11-libs-0:1.1.1w-3.8.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl11-libs@1.1.1w-3.8?arch=amd64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl-dev-0:1.1.1w-3.1.amd64", "product": { "name": "alt-openssl-dev-0:1.1.1w-3.1.amd64", "product_id": "alt-openssl-dev-0:1.1.1w-3.1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl-dev@1.1.1w-3.1?arch=amd64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl-dev-0:1.1.1w-3.5.amd64", "product": { "name": "alt-openssl-dev-0:1.1.1w-3.5.amd64", "product_id": "alt-openssl-dev-0:1.1.1w-3.5.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl-dev@1.1.1w-3.5?arch=amd64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl-dev-0:1.1.1w-3.2.amd64", "product": { "name": "alt-openssl-dev-0:1.1.1w-3.2.amd64", "product_id": "alt-openssl-dev-0:1.1.1w-3.2.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl-dev@1.1.1w-3.2?arch=amd64&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl-dev-0:1.1.1w-3.4.amd64", "product": { "name": "alt-openssl-dev-0:1.1.1w-3.4.amd64", "product_id": "alt-openssl-dev-0:1.1.1w-3.4.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl-dev@1.1.1w-3.4?arch=amd64&os_name=debian&os_version=13" } } } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "category": "product_version", "name": "alt-openssl-doc-0:1.1.1w-3.5.all", "product": { "name": "alt-openssl-doc-0:1.1.1w-3.5.all", "product_id": "alt-openssl-doc-0:1.1.1w-3.5.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl-doc@1.1.1w-3.5?arch=all&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl-doc-0:1.1.1w-3.1.all", "product": { "name": "alt-openssl-doc-0:1.1.1w-3.1.all", "product_id": "alt-openssl-doc-0:1.1.1w-3.1.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl-doc@1.1.1w-3.1?arch=all&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl-doc-0:1.1.1w-3.4.all", "product": { "name": "alt-openssl-doc-0:1.1.1w-3.4.all", "product_id": "alt-openssl-doc-0:1.1.1w-3.4.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl-doc@1.1.1w-3.4?arch=all&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl-doc-0:1.1.1w-3.2.all", "product": { "name": "alt-openssl-doc-0:1.1.1w-3.2.all", "product_id": "alt-openssl-doc-0:1.1.1w-3.2.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl-doc@1.1.1w-3.2?arch=all&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl11-doc-0:1.1.1w-3.8.all", "product": { "name": "alt-openssl11-doc-0:1.1.1w-3.8.all", "product_id": "alt-openssl11-doc-0:1.1.1w-3.8.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl11-doc@1.1.1w-3.8?arch=all&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl11-doc-0:1.1.1w-3.7.all", "product": { "name": "alt-openssl11-doc-0:1.1.1w-3.7.all", "product_id": "alt-openssl11-doc-0:1.1.1w-3.7.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl11-doc@1.1.1w-3.7?arch=all&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl11-doc-0:1.1.1w-3.11.all", "product": { "name": "alt-openssl11-doc-0:1.1.1w-3.11.all", "product_id": "alt-openssl11-doc-0:1.1.1w-3.11.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl11-doc@1.1.1w-3.11?arch=all&os_name=debian&os_version=13" } } }, { "category": "product_version", "name": "alt-openssl11-doc-0:1.1.1w-3.10.all", "product": { "name": "alt-openssl11-doc-0:1.1.1w-3.10.all", "product_id": "alt-openssl11-doc-0:1.1.1w-3.10.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-openssl11-doc@1.1.1w-3.10?arch=all&os_name=debian&os_version=13" } } } ], "category": "architecture", "name": "all" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "alt-openssl-libs-0:1.1.1w-3.2.arm64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl-libs-0:1.1.1w-3.2.arm64" }, "product_reference": "alt-openssl-libs-0:1.1.1w-3.2.arm64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl-libs-0:1.1.1w-3.2.amd64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl-libs-0:1.1.1w-3.2.amd64" }, "product_reference": "alt-openssl-libs-0:1.1.1w-3.2.amd64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl-libs-0:1.1.1w-3.5.amd64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl-libs-0:1.1.1w-3.5.amd64" }, "product_reference": "alt-openssl-libs-0:1.1.1w-3.5.amd64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl-libs-0:1.1.1w-3.5.arm64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl-libs-0:1.1.1w-3.5.arm64" }, "product_reference": "alt-openssl-libs-0:1.1.1w-3.5.arm64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl-libs-0:1.1.1w-3.1.arm64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl-libs-0:1.1.1w-3.1.arm64" }, "product_reference": "alt-openssl-libs-0:1.1.1w-3.1.arm64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl-libs-0:1.1.1w-3.1.amd64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl-libs-0:1.1.1w-3.1.amd64" }, "product_reference": "alt-openssl-libs-0:1.1.1w-3.1.amd64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl-libs-0:1.1.1w-3.4.arm64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl-libs-0:1.1.1w-3.4.arm64" }, "product_reference": "alt-openssl-libs-0:1.1.1w-3.4.arm64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl-libs-0:1.1.1w-3.4.amd64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl-libs-0:1.1.1w-3.4.amd64" }, "product_reference": "alt-openssl-libs-0:1.1.1w-3.4.amd64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl-doc-0:1.1.1w-3.5.all as a component of Debian 13", "product_id": "Debian-13:alt-openssl-doc-0:1.1.1w-3.5.all" }, "product_reference": "alt-openssl-doc-0:1.1.1w-3.5.all", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl-doc-0:1.1.1w-3.1.all as a component of Debian 13", "product_id": "Debian-13:alt-openssl-doc-0:1.1.1w-3.1.all" }, "product_reference": "alt-openssl-doc-0:1.1.1w-3.1.all", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl-doc-0:1.1.1w-3.4.all as a component of Debian 13", "product_id": "Debian-13:alt-openssl-doc-0:1.1.1w-3.4.all" }, "product_reference": "alt-openssl-doc-0:1.1.1w-3.4.all", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl-doc-0:1.1.1w-3.2.all as a component of Debian 13", "product_id": "Debian-13:alt-openssl-doc-0:1.1.1w-3.2.all" }, "product_reference": "alt-openssl-doc-0:1.1.1w-3.2.all", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl-0:1.1.1w-3.4.amd64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl-0:1.1.1w-3.4.amd64" }, "product_reference": "alt-openssl-0:1.1.1w-3.4.amd64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl-0:1.1.1w-3.4.arm64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl-0:1.1.1w-3.4.arm64" }, "product_reference": "alt-openssl-0:1.1.1w-3.4.arm64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl-0:1.1.1w-3.1.arm64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl-0:1.1.1w-3.1.arm64" }, "product_reference": "alt-openssl-0:1.1.1w-3.1.arm64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl-0:1.1.1w-3.1.amd64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl-0:1.1.1w-3.1.amd64" }, "product_reference": "alt-openssl-0:1.1.1w-3.1.amd64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl-0:1.1.1w-3.5.arm64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl-0:1.1.1w-3.5.arm64" }, "product_reference": "alt-openssl-0:1.1.1w-3.5.arm64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl-0:1.1.1w-3.5.amd64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl-0:1.1.1w-3.5.amd64" }, "product_reference": "alt-openssl-0:1.1.1w-3.5.amd64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl-0:1.1.1w-3.2.amd64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl-0:1.1.1w-3.2.amd64" }, "product_reference": "alt-openssl-0:1.1.1w-3.2.amd64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl-0:1.1.1w-3.2.arm64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl-0:1.1.1w-3.2.arm64" }, "product_reference": "alt-openssl-0:1.1.1w-3.2.arm64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl11-doc-0:1.1.1w-3.8.all as a component of Debian 13", "product_id": "Debian-13:alt-openssl11-doc-0:1.1.1w-3.8.all" }, "product_reference": "alt-openssl11-doc-0:1.1.1w-3.8.all", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl11-doc-0:1.1.1w-3.7.all as a component of Debian 13", "product_id": "Debian-13:alt-openssl11-doc-0:1.1.1w-3.7.all" }, "product_reference": "alt-openssl11-doc-0:1.1.1w-3.7.all", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl11-doc-0:1.1.1w-3.11.all as a component of Debian 13", "product_id": "Debian-13:alt-openssl11-doc-0:1.1.1w-3.11.all" }, "product_reference": "alt-openssl11-doc-0:1.1.1w-3.11.all", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl11-doc-0:1.1.1w-3.10.all as a component of Debian 13", "product_id": "Debian-13:alt-openssl11-doc-0:1.1.1w-3.10.all" }, "product_reference": "alt-openssl11-doc-0:1.1.1w-3.10.all", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl11-dev-0:1.1.1w-3.7.arm64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl11-dev-0:1.1.1w-3.7.arm64" }, "product_reference": "alt-openssl11-dev-0:1.1.1w-3.7.arm64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl11-dev-0:1.1.1w-3.7.amd64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl11-dev-0:1.1.1w-3.7.amd64" }, "product_reference": "alt-openssl11-dev-0:1.1.1w-3.7.amd64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl11-dev-0:1.1.1w-3.10.arm64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl11-dev-0:1.1.1w-3.10.arm64" }, "product_reference": "alt-openssl11-dev-0:1.1.1w-3.10.arm64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl11-dev-0:1.1.1w-3.10.amd64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl11-dev-0:1.1.1w-3.10.amd64" }, "product_reference": "alt-openssl11-dev-0:1.1.1w-3.10.amd64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl11-dev-0:1.1.1w-3.11.amd64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl11-dev-0:1.1.1w-3.11.amd64" }, "product_reference": "alt-openssl11-dev-0:1.1.1w-3.11.amd64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl11-dev-0:1.1.1w-3.11.arm64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl11-dev-0:1.1.1w-3.11.arm64" }, "product_reference": "alt-openssl11-dev-0:1.1.1w-3.11.arm64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl11-dev-0:1.1.1w-3.8.amd64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl11-dev-0:1.1.1w-3.8.amd64" }, "product_reference": "alt-openssl11-dev-0:1.1.1w-3.8.amd64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl11-0:1.1.1w-3.7.arm64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl11-0:1.1.1w-3.7.arm64" }, "product_reference": "alt-openssl11-0:1.1.1w-3.7.arm64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl11-0:1.1.1w-3.7.amd64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl11-0:1.1.1w-3.7.amd64" }, "product_reference": "alt-openssl11-0:1.1.1w-3.7.amd64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl11-0:1.1.1w-3.10.arm64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl11-0:1.1.1w-3.10.arm64" }, "product_reference": "alt-openssl11-0:1.1.1w-3.10.arm64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl11-0:1.1.1w-3.10.amd64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl11-0:1.1.1w-3.10.amd64" }, "product_reference": "alt-openssl11-0:1.1.1w-3.10.amd64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl11-0:1.1.1w-3.8.amd64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl11-0:1.1.1w-3.8.amd64" }, "product_reference": "alt-openssl11-0:1.1.1w-3.8.amd64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl11-0:1.1.1w-3.11.arm64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl11-0:1.1.1w-3.11.arm64" }, "product_reference": "alt-openssl11-0:1.1.1w-3.11.arm64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl11-0:1.1.1w-3.11.amd64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl11-0:1.1.1w-3.11.amd64" }, "product_reference": "alt-openssl11-0:1.1.1w-3.11.amd64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl11-libs-0:1.1.1w-3.7.amd64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl11-libs-0:1.1.1w-3.7.amd64" }, "product_reference": "alt-openssl11-libs-0:1.1.1w-3.7.amd64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl11-libs-0:1.1.1w-3.7.arm64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl11-libs-0:1.1.1w-3.7.arm64" }, "product_reference": "alt-openssl11-libs-0:1.1.1w-3.7.arm64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl11-libs-0:1.1.1w-3.10.amd64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl11-libs-0:1.1.1w-3.10.amd64" }, "product_reference": "alt-openssl11-libs-0:1.1.1w-3.10.amd64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl11-libs-0:1.1.1w-3.10.arm64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl11-libs-0:1.1.1w-3.10.arm64" }, "product_reference": "alt-openssl11-libs-0:1.1.1w-3.10.arm64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl11-libs-0:1.1.1w-3.11.arm64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl11-libs-0:1.1.1w-3.11.arm64" }, "product_reference": "alt-openssl11-libs-0:1.1.1w-3.11.arm64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl11-libs-0:1.1.1w-3.11.amd64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl11-libs-0:1.1.1w-3.11.amd64" }, "product_reference": "alt-openssl11-libs-0:1.1.1w-3.11.amd64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl11-libs-0:1.1.1w-3.8.amd64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl11-libs-0:1.1.1w-3.8.amd64" }, "product_reference": "alt-openssl11-libs-0:1.1.1w-3.8.amd64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl-dev-0:1.1.1w-3.1.arm64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl-dev-0:1.1.1w-3.1.arm64" }, "product_reference": "alt-openssl-dev-0:1.1.1w-3.1.arm64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl-dev-0:1.1.1w-3.1.amd64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl-dev-0:1.1.1w-3.1.amd64" }, "product_reference": "alt-openssl-dev-0:1.1.1w-3.1.amd64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl-dev-0:1.1.1w-3.5.amd64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl-dev-0:1.1.1w-3.5.amd64" }, "product_reference": "alt-openssl-dev-0:1.1.1w-3.5.amd64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl-dev-0:1.1.1w-3.5.arm64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl-dev-0:1.1.1w-3.5.arm64" }, "product_reference": "alt-openssl-dev-0:1.1.1w-3.5.arm64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl-dev-0:1.1.1w-3.2.arm64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl-dev-0:1.1.1w-3.2.arm64" }, "product_reference": "alt-openssl-dev-0:1.1.1w-3.2.arm64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl-dev-0:1.1.1w-3.2.amd64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl-dev-0:1.1.1w-3.2.amd64" }, "product_reference": "alt-openssl-dev-0:1.1.1w-3.2.amd64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl-dev-0:1.1.1w-3.4.arm64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl-dev-0:1.1.1w-3.4.arm64" }, "product_reference": "alt-openssl-dev-0:1.1.1w-3.4.arm64", "relates_to_product_reference": "Debian-13" }, { "category": "default_component_of", "full_product_name": { "name": "alt-openssl-dev-0:1.1.1w-3.4.amd64 as a component of Debian 13", "product_id": "Debian-13:alt-openssl-dev-0:1.1.1w-3.4.amd64" }, "product_reference": "alt-openssl-dev-0:1.1.1w-3.4.amd64", "relates_to_product_reference": "Debian-13" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-4741", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause\nmemory to be accessed that was previously freed in some situations\n\nImpact summary: A use after free can have a range of potential consequences such\nas the corruption of valid data, crashes or execution of arbitrary code.\nHowever, only applications that directly call the SSL_free_buffers function are\naffected by this issue. Applications that do not call this function are not\nvulnerable. Our investigations indicate that this function is rarely used by\napplications.\n\nThe SSL_free_buffers function is used to free the internal OpenSSL buffer used\nwhen processing an incoming record from the network. The call is only expected\nto succeed if the buffer is not currently in use. However, two scenarios have\nbeen identified where the buffer is freed even when still in use.\n\nThe first scenario occurs where a record header has been received from the\nnetwork and processed by OpenSSL, but the full record body has not yet arrived.\nIn this case calling SSL_free_buffers will succeed even though a record has only\nbeen partially processed and the buffer is still in use.\n\nThe second scenario occurs where a full record containing application data has\nbeen received and processed by OpenSSL but the application has only read part of\nthis data. Again a call to SSL_free_buffers will succeed even though the buffer\nis still in use.\n\nWhile these scenarios could occur accidentally during normal operation a\nmalicious attacker could attempt to engineer a stituation where this occurs.\nWe are not aware of this issue being actively exploited.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "under_investigation": [ "Debian-13:alt-openssl-0:1.1.1w-3.1.amd64", "Debian-13:alt-openssl-0:1.1.1w-3.1.arm64", "Debian-13:alt-openssl-0:1.1.1w-3.2.amd64", "Debian-13:alt-openssl-0:1.1.1w-3.2.arm64", "Debian-13:alt-openssl-0:1.1.1w-3.4.amd64", "Debian-13:alt-openssl-0:1.1.1w-3.4.arm64", "Debian-13:alt-openssl-0:1.1.1w-3.5.amd64", "Debian-13:alt-openssl-0:1.1.1w-3.5.arm64", "Debian-13:alt-openssl-dev-0:1.1.1w-3.1.amd64", "Debian-13:alt-openssl-dev-0:1.1.1w-3.1.arm64", "Debian-13:alt-openssl-dev-0:1.1.1w-3.2.amd64", "Debian-13:alt-openssl-dev-0:1.1.1w-3.2.arm64", "Debian-13:alt-openssl-dev-0:1.1.1w-3.4.amd64", "Debian-13:alt-openssl-dev-0:1.1.1w-3.4.arm64", "Debian-13:alt-openssl-dev-0:1.1.1w-3.5.amd64", "Debian-13:alt-openssl-dev-0:1.1.1w-3.5.arm64", "Debian-13:alt-openssl-doc-0:1.1.1w-3.1.all", "Debian-13:alt-openssl-doc-0:1.1.1w-3.2.all", "Debian-13:alt-openssl-doc-0:1.1.1w-3.4.all", "Debian-13:alt-openssl-doc-0:1.1.1w-3.5.all", "Debian-13:alt-openssl-libs-0:1.1.1w-3.1.amd64", "Debian-13:alt-openssl-libs-0:1.1.1w-3.1.arm64", "Debian-13:alt-openssl-libs-0:1.1.1w-3.2.amd64", "Debian-13:alt-openssl-libs-0:1.1.1w-3.2.arm64", "Debian-13:alt-openssl-libs-0:1.1.1w-3.4.amd64", "Debian-13:alt-openssl-libs-0:1.1.1w-3.4.arm64", "Debian-13:alt-openssl-libs-0:1.1.1w-3.5.amd64", "Debian-13:alt-openssl-libs-0:1.1.1w-3.5.arm64", "Debian-13:alt-openssl11-0:1.1.1w-3.10.amd64", "Debian-13:alt-openssl11-0:1.1.1w-3.10.arm64", "Debian-13:alt-openssl11-0:1.1.1w-3.11.amd64", "Debian-13:alt-openssl11-0:1.1.1w-3.11.arm64", "Debian-13:alt-openssl11-0:1.1.1w-3.7.amd64", "Debian-13:alt-openssl11-0:1.1.1w-3.7.arm64", "Debian-13:alt-openssl11-0:1.1.1w-3.8.amd64", "Debian-13:alt-openssl11-dev-0:1.1.1w-3.10.amd64", "Debian-13:alt-openssl11-dev-0:1.1.1w-3.10.arm64", "Debian-13:alt-openssl11-dev-0:1.1.1w-3.11.amd64", "Debian-13:alt-openssl11-dev-0:1.1.1w-3.11.arm64", "Debian-13:alt-openssl11-dev-0:1.1.1w-3.7.amd64", "Debian-13:alt-openssl11-dev-0:1.1.1w-3.7.arm64", "Debian-13:alt-openssl11-dev-0:1.1.1w-3.8.amd64", "Debian-13:alt-openssl11-doc-0:1.1.1w-3.10.all", "Debian-13:alt-openssl11-doc-0:1.1.1w-3.11.all", "Debian-13:alt-openssl11-doc-0:1.1.1w-3.7.all", "Debian-13:alt-openssl11-doc-0:1.1.1w-3.8.all", "Debian-13:alt-openssl11-libs-0:1.1.1w-3.10.amd64", "Debian-13:alt-openssl11-libs-0:1.1.1w-3.10.arm64", "Debian-13:alt-openssl11-libs-0:1.1.1w-3.11.amd64", "Debian-13:alt-openssl11-libs-0:1.1.1w-3.11.arm64", "Debian-13:alt-openssl11-libs-0:1.1.1w-3.7.amd64", "Debian-13:alt-openssl11-libs-0:1.1.1w-3.7.arm64", "Debian-13:alt-openssl11-libs-0:1.1.1w-3.8.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-alt-common/cve/CVE-2024-4741" }, { "category": "external", "summary": "https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177", "url": "https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177" }, { "category": "external", "summary": "https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d", "url": "https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d" }, { "category": "external", "summary": "https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac", "url": "https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac" }, { "category": "external", "summary": "https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8", "url": "https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8" }, { "category": "external", "summary": "https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4", "url": "https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20240528.txt", "url": "https://www.openssl.org/news/secadv/20240528.txt" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html", "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html", "url": "https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240621-0004/", "url": "https://security.netapp.com/advisory/ntap-20240621-0004/" } ], "release_date": "2024-11-13T11:15:00Z", "remediations": [ { "category": "none_available", "date": "2026-10-18T18:56:08.799780Z", "details": "Affected", "product_ids": [ "Debian-13:alt-openssl-0:1.1.1w-3.1.amd64", "Debian-13:alt-openssl-0:1.1.1w-3.1.arm64", "Debian-13:alt-openssl-0:1.1.1w-3.2.amd64", "Debian-13:alt-openssl-0:1.1.1w-3.2.arm64", "Debian-13:alt-openssl-0:1.1.1w-3.4.amd64", "Debian-13:alt-openssl-0:1.1.1w-3.4.arm64", "Debian-13:alt-openssl-0:1.1.1w-3.5.amd64", "Debian-13:alt-openssl-0:1.1.1w-3.5.arm64", "Debian-13:alt-openssl-dev-0:1.1.1w-3.1.amd64", "Debian-13:alt-openssl-dev-0:1.1.1w-3.1.arm64", "Debian-13:alt-openssl-dev-0:1.1.1w-3.2.amd64", "Debian-13:alt-openssl-dev-0:1.1.1w-3.2.arm64", "Debian-13:alt-openssl-dev-0:1.1.1w-3.4.amd64", "Debian-13:alt-openssl-dev-0:1.1.1w-3.4.arm64", "Debian-13:alt-openssl-dev-0:1.1.1w-3.5.amd64", "Debian-13:alt-openssl-dev-0:1.1.1w-3.5.arm64", "Debian-13:alt-openssl-doc-0:1.1.1w-3.1.all", "Debian-13:alt-openssl-doc-0:1.1.1w-3.2.all", "Debian-13:alt-openssl-doc-0:1.1.1w-3.4.all", "Debian-13:alt-openssl-doc-0:1.1.1w-3.5.all", "Debian-13:alt-openssl-libs-0:1.1.1w-3.1.amd64", "Debian-13:alt-openssl-libs-0:1.1.1w-3.1.arm64", "Debian-13:alt-openssl-libs-0:1.1.1w-3.2.amd64", "Debian-13:alt-openssl-libs-0:1.1.1w-3.2.arm64", "Debian-13:alt-openssl-libs-0:1.1.1w-3.4.amd64", "Debian-13:alt-openssl-libs-0:1.1.1w-3.4.arm64", "Debian-13:alt-openssl-libs-0:1.1.1w-3.5.amd64", "Debian-13:alt-openssl-libs-0:1.1.1w-3.5.arm64", "Debian-13:alt-openssl11-0:1.1.1w-3.10.amd64", "Debian-13:alt-openssl11-0:1.1.1w-3.10.arm64", "Debian-13:alt-openssl11-0:1.1.1w-3.11.amd64", "Debian-13:alt-openssl11-0:1.1.1w-3.11.arm64", "Debian-13:alt-openssl11-0:1.1.1w-3.7.amd64", "Debian-13:alt-openssl11-0:1.1.1w-3.7.arm64", "Debian-13:alt-openssl11-0:1.1.1w-3.8.amd64", "Debian-13:alt-openssl11-dev-0:1.1.1w-3.10.amd64", "Debian-13:alt-openssl11-dev-0:1.1.1w-3.10.arm64", "Debian-13:alt-openssl11-dev-0:1.1.1w-3.11.amd64", "Debian-13:alt-openssl11-dev-0:1.1.1w-3.11.arm64", "Debian-13:alt-openssl11-dev-0:1.1.1w-3.7.amd64", "Debian-13:alt-openssl11-dev-0:1.1.1w-3.7.arm64", "Debian-13:alt-openssl11-dev-0:1.1.1w-3.8.amd64", "Debian-13:alt-openssl11-doc-0:1.1.1w-3.10.all", "Debian-13:alt-openssl11-doc-0:1.1.1w-3.11.all", "Debian-13:alt-openssl11-doc-0:1.1.1w-3.7.all", "Debian-13:alt-openssl11-doc-0:1.1.1w-3.8.all", "Debian-13:alt-openssl11-libs-0:1.1.1w-3.10.amd64", "Debian-13:alt-openssl11-libs-0:1.1.1w-3.10.arm64", "Debian-13:alt-openssl11-libs-0:1.1.1w-3.11.amd64", "Debian-13:alt-openssl11-libs-0:1.1.1w-3.11.arm64", "Debian-13:alt-openssl11-libs-0:1.1.1w-3.7.amd64", "Debian-13:alt-openssl11-libs-0:1.1.1w-3.7.arm64", "Debian-13:alt-openssl11-libs-0:1.1.1w-3.8.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "Debian-13:alt-openssl-0:1.1.1w-3.1.amd64", "Debian-13:alt-openssl-0:1.1.1w-3.1.arm64", "Debian-13:alt-openssl-0:1.1.1w-3.2.amd64", "Debian-13:alt-openssl-0:1.1.1w-3.2.arm64", "Debian-13:alt-openssl-0:1.1.1w-3.4.amd64", "Debian-13:alt-openssl-0:1.1.1w-3.4.arm64", "Debian-13:alt-openssl-0:1.1.1w-3.5.amd64", "Debian-13:alt-openssl-0:1.1.1w-3.5.arm64", "Debian-13:alt-openssl-dev-0:1.1.1w-3.1.amd64", "Debian-13:alt-openssl-dev-0:1.1.1w-3.1.arm64", "Debian-13:alt-openssl-dev-0:1.1.1w-3.2.amd64", "Debian-13:alt-openssl-dev-0:1.1.1w-3.2.arm64", "Debian-13:alt-openssl-dev-0:1.1.1w-3.4.amd64", "Debian-13:alt-openssl-dev-0:1.1.1w-3.4.arm64", "Debian-13:alt-openssl-dev-0:1.1.1w-3.5.amd64", "Debian-13:alt-openssl-dev-0:1.1.1w-3.5.arm64", "Debian-13:alt-openssl-doc-0:1.1.1w-3.1.all", "Debian-13:alt-openssl-doc-0:1.1.1w-3.2.all", "Debian-13:alt-openssl-doc-0:1.1.1w-3.4.all", "Debian-13:alt-openssl-doc-0:1.1.1w-3.5.all", "Debian-13:alt-openssl-libs-0:1.1.1w-3.1.amd64", "Debian-13:alt-openssl-libs-0:1.1.1w-3.1.arm64", "Debian-13:alt-openssl-libs-0:1.1.1w-3.2.amd64", "Debian-13:alt-openssl-libs-0:1.1.1w-3.2.arm64", "Debian-13:alt-openssl-libs-0:1.1.1w-3.4.amd64", "Debian-13:alt-openssl-libs-0:1.1.1w-3.4.arm64", "Debian-13:alt-openssl-libs-0:1.1.1w-3.5.amd64", "Debian-13:alt-openssl-libs-0:1.1.1w-3.5.arm64", "Debian-13:alt-openssl11-0:1.1.1w-3.10.amd64", "Debian-13:alt-openssl11-0:1.1.1w-3.10.arm64", "Debian-13:alt-openssl11-0:1.1.1w-3.11.amd64", "Debian-13:alt-openssl11-0:1.1.1w-3.11.arm64", "Debian-13:alt-openssl11-0:1.1.1w-3.7.amd64", "Debian-13:alt-openssl11-0:1.1.1w-3.7.arm64", "Debian-13:alt-openssl11-0:1.1.1w-3.8.amd64", "Debian-13:alt-openssl11-dev-0:1.1.1w-3.10.amd64", "Debian-13:alt-openssl11-dev-0:1.1.1w-3.10.arm64", "Debian-13:alt-openssl11-dev-0:1.1.1w-3.11.amd64", "Debian-13:alt-openssl11-dev-0:1.1.1w-3.11.arm64", "Debian-13:alt-openssl11-dev-0:1.1.1w-3.7.amd64", "Debian-13:alt-openssl11-dev-0:1.1.1w-3.7.arm64", "Debian-13:alt-openssl11-dev-0:1.1.1w-3.8.amd64", "Debian-13:alt-openssl11-doc-0:1.1.1w-3.10.all", "Debian-13:alt-openssl11-doc-0:1.1.1w-3.11.all", "Debian-13:alt-openssl11-doc-0:1.1.1w-3.7.all", "Debian-13:alt-openssl11-doc-0:1.1.1w-3.8.all", "Debian-13:alt-openssl11-libs-0:1.1.1w-3.10.amd64", "Debian-13:alt-openssl11-libs-0:1.1.1w-3.10.arm64", "Debian-13:alt-openssl11-libs-0:1.1.1w-3.11.amd64", "Debian-13:alt-openssl11-libs-0:1.1.1w-3.11.arm64", "Debian-13:alt-openssl11-libs-0:1.1.1w-3.7.amd64", "Debian-13:alt-openssl11-libs-0:1.1.1w-3.7.arm64", "Debian-13:alt-openssl11-libs-0:1.1.1w-3.8.amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] } ] }