CVE-2024-2511: OpenSSL 3.2.0 to before 3.2.2, 3.1.0 to before 3.1.6, 3.0.0 to before 3.0.14, 1.1.1 to before 1.1.1y; +30 more…

Affected technology

OpenSSL · 3.2.0 to before 3.2.2, 3.1.0 to before 3.1.6, 3.0.0 to before 3.0.14, 1.1.1 to before 1.1.1y
OpenSSL

RUGGEDCOM RM1224 LTE(4G) EU · 0 to before V8.2
Siemens

RUGGEDCOM RM1224 LTE(4G) NAM · 0 to before V8.2
Siemens

RUGGEDCOM RST2428P · 0 to before V3.1
Siemens

SCALANCE M804PB · 0 to before V8.2
Siemens

SCALANCE M812-1 ADSL-Router · 0 to before V8.2
Siemens

SCALANCE M816-1 ADSL-Router · 0 to before V8.2
Siemens

SCALANCE M826-2 SHDSL-Router · 0 to before V8.2
Siemens

SCALANCE M874-2 · 0 to before V8.2
Siemens

SCALANCE M874-3 · 0 to before V8.2
Siemens

SCALANCE M874-3 3G-Router (CN) · 0 to before V8.2
Siemens

SCALANCE M876-3 · 0 to before V8.2
Siemens

SCALANCE M876-3 (ROK) · 0 to before V8.2
Siemens

SCALANCE M876-4 · 0 to before V8.2
Siemens

SCALANCE M876-4 (EU) · 0 to before V8.2
Siemens

SCALANCE M876-4 (NAM) · 0 to before V8.2
Siemens

SCALANCE MUM853-1 (A1) · 0 to before V8.2
Siemens

SCALANCE MUM853-1 (B1) · 0 to before V8.2
Siemens

SCALANCE MUM853-1 (EU) · 0 to before V8.2
Siemens

SCALANCE MUM856-1 (A1) · 0 to before V8.2
Siemens

SCALANCE MUM856-1 (B1) · 0 to before V8.2
Siemens

SCALANCE MUM856-1 (CN) · 0 to before V8.2
Siemens

SCALANCE MUM856-1 (EU) · 0 to before V8.2
Siemens

SCALANCE MUM856-1 (RoW) · 0 to before V8.2
Siemens

SCALANCE S615 EEC LAN-Router · 0 to before V8.2
Siemens

SCALANCE S615 LAN-Router · 0 to before V8.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.1
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

The source says issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial of Service This problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is being used (but not if early_data support is also configured and the default anti-replay protection is in use). Source advisory’s CVSS 3.1 assessment (base score 5.9/10) rates confidentiality and integrity impact as none; availability impact as high.