Alerts This Week
Warning Icon 1 1,153
Alerts This Week
Warning Icon 1 1,153

Ubuntu 24.04 LTS: USN-6937-1 Critical OpenSSL Denial of Service

ubuntu
Calendar Grey July 31, 2024
Dist Ubuntu Esm H88
Numerous vulnerabilities resolved in OpenSSL impact various Ubuntu LTS versions; ensure you apply the updates.
Several security issues were fixed in OpenSSL.

Summary

Several security issues were fixed in OpenSSL.

Software Description:

- openssl: Secure Socket Layer (SSL) cryptographic library and tools

Details:

It was discovered that OpenSSL incorrectly handled TLSv1.3 sessions when

certain non-default TLS server configurations were in use. A remote

attacker could possibly use this issue to cause OpenSSL to consume

resources, leading to a denial of service. (CVE-2024-2511)

It was discovered that OpenSSL incorrectly handled checking excessively

long DSA keys or parameters. A remote attacker could possibly use this

issue to cause OpenSSL to consume resources, leading to a denial of

service. This issue only affected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS.

(CVE-2024-4603)

William Ahern discovered that OpenSSL incorrectly handled certain memory

operations in a rarely-used API. A remote attacker could use this issue to

cause OpenSSL to crash, resulting in a denial of service, or possibly

execute arbitrary code. (CVE-2024-474...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service security update openssl ubuntu 20.04 ubuntu 22.04 ubuntu 24.04

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
   libssl3t64                      3.0.13-0ubuntu3.2

Ubuntu 22.04 LTS
   libssl3                         3.0.2-0ubuntu1.17

Ubuntu 20.04 LTS
   libssl1.1                       1.1.1f-1ubuntu2.23

After a standard system update you need to reboot your computer to make all
the necessary changes.

References

https://ubuntu.com/security/notices/USN-6937-1

CVE-2024-2511, CVE-2024-4603, CVE-2024-4741, CVE-2024-5535

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-6937-1

Topics%20covered

Topics Covered

security advisory denial of service security update openssl ubuntu 20.04 ubuntu 22.04 ubuntu 24.04

Package Information

https://launchpad.net/ubuntu/+source/openssl/3.0.13-0ubuntu3.2
https://launchpad.net/ubuntu/+source/openssl/3.0.2-0ubuntu1.17
https://launchpad.net/ubuntu/+source/openssl/1.1.1f-1ubuntu2.23

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here