CVE-2024-48075

Name of the Vulnerable Software and Affected Versions Real Time Logic SharkSSL versions 09.09.24 and earlier

Description A Heap buffer overflow in the server-site handshake implementation allows a remote attacker to trigger a Denial-of-Service via a malformed TLS Client Key Exchange message.

Recommendations For versions 09.09.24 and earlier, as a temporary workaround, consider restricting access to the TLS Client Key Exchange message handling functionality until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.