PT-2024-10083

CVE-2024-33617

Published

2024-11-13

Updated

2025-11-11

Description by

CVSS 4.0

8.2

High

MetricsAV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Intel QAT Engine for OpenSSL versions prior to v1.6.1

Description The issue is related to insufficient control flow management in the Intel QAT Engine for OpenSSL software, which may allow information disclosure via network access. This could enable a remote attacker to gain unauthorized access to protected information.

Recommendations For versions prior to v1.6.1, update to version v1.6.1 or later to resolve the issue.

Exploitability

Fix

Researchers

Alicja Kario

Vendors

Affected products

Weakness enumeration

CWE-691: Insufficient Control Flow Management

Related identifiers

CVE-2024-33617

BDU:2025-00256