CVE-2024-12797

Name of the Vulnerable Software and Affected Versions OpenSSL versions 3.2 through 3.4

Description Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a server may fail to detect that the server was not authenticated. This occurs because TLS and DTLS handshakes do not abort as expected when the SSL VERIFY PEER verification mode is set. This issue can lead to man-in-the-middle attacks if the client relies on the handshake failure to identify an authentication mismatch. RPKs are disabled by default; the issue only manifests when clients explicitly enable RPK use and the server sends an RPK instead of an X.509 certificate chain. Clients that verify the result by calling the SSL get verify result() function and take appropriate action are not affected. FIPS modules in versions 3.0 through 3.4 are not impacted.

Recommendations Update OpenSSL version 3.4 to 3.4.1 Update OpenSSL version 3.3 to 3.3.3 Update OpenSSL version 3.2 to 3.2.4 As a temporary mitigation, avoid using the SSL VERIFY PEER verification mode when relying on Raw Public Keys for server authentication, or ensure the SSL get verify result() function is called to manually verify the authentication status.