CVE-2024-28885

Name of the Vulnerable Software and Affected Versions: Intel QAT Engine for OpenSSL versions prior to v1.6.1

Description: The issue is related to an observable discrepancy in the Intel QAT Engine for OpenSSL software, which may allow information disclosure via network access. This could potentially enable an attacker to reveal protected information.

Recommendations: For versions prior to v1.6.1, update to version v1.6.1 or later to resolve the issue. As a temporary workaround, consider restricting network access to the Intel QAT Engine for OpenSSL software until the update is applied.