CVE-2024-5535
OpenSSL: CVE-2024-5535 SSL_select_next_proto buffer overread
CVE-2024-5535 is fixed in 46 products on 1 platform, first by libssl1.1 1.1.1f-1ubuntu2.23, released June 27, 2024. It is not reported as exploited. Patch Radar priority: High.
High
CVSS
9.1
Low
Exploitation
None reported
Exploitation Less Likely
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0558
92nd percentile
<p>We are republishing this OpenSSL CVE to document that the latest version Microsoft Defender for Endpoint has been updated to protect against this OpenSSL library vulnerability.</p>
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| efi-shell-aa64 · Ubuntu 24.04.5 LTS (noble) | 2024.02-2ubuntu0.6 | efi-shell-aa64 2024.02-2ubuntu0.6 | Aug 12, 2025 |
| efi-shell-arm · Ubuntu 24.04.5 LTS (noble) | 2024.02-2ubuntu0.6 | efi-shell-arm 2024.02-2ubuntu0.6 | Aug 12, 2025 |
| efi-shell-ia32 · Ubuntu 24.04.5 LTS (noble) | 2024.02-2ubuntu0.6 | efi-shell-ia32 2024.02-2ubuntu0.6 | Aug 12, 2025 |
| efi-shell-riscv64 · Ubuntu 24.04.5 LTS (noble) | 2024.02-2ubuntu0.6 | efi-shell-riscv64 2024.02-2ubuntu0.6 | Aug 12, 2025 |
| efi-shell-x64 · Ubuntu 24.04.5 LTS (noble) | 2024.02-2ubuntu0.6 | efi-shell-x64 2024.02-2ubuntu0.6 | Aug 12, 2025 |
| libssl1.0.0 · Ubuntu 18.04.6 LTS (bionic) | 1.0.2n-1ubuntu5.13+esm6 | libssl1.0.0 1.0.2n-1ubuntu5.13+esm6 | Aug 27, 2026 |
| libssl1.1 · Ubuntu 18.04.6 LTS (bionic) | 1.1.1-1ubuntu2.1~18.04.23+esm10 | libssl1.1 1.1.1-1ubuntu2.1~18.04.23+esm10 | Aug 27, 2026 |
| libssl1.1 · Ubuntu 20.04 LTS (focal) | 1.1.1f-1ubuntu2.23 | libssl1.1 1.1.1f-1ubuntu2.23 | Jun 27, 2024 |
| libssl3 · Ubuntu 22.04.1 LTS (jammy) | 3.0.2-0ubuntu1.17 | libssl3 3.0.2-0ubuntu1.17 | Jun 27, 2024 |
| libssl3t64 · Ubuntu 24.04.5 LTS (noble) | 3.0.13-0ubuntu3.2 | libssl3t64 3.0.13-0ubuntu3.2 | Jun 27, 2024 |
| libssl3t64 · Ubuntu 24.10 (oracular) | 3.2.2-1ubuntu2 | libssl3t64 3.2.2-1ubuntu2 | Jan 16, 2026 |
| libssl3t64 · Ubuntu 25.04 (plucky) | 3.2.2-1ubuntu2 | libssl3t64 3.2.2-1ubuntu2 | Jan 16, 2026 |
| mecab · RHEL 8 | 0:0.996-2.module+el8.10.0+22857+7f331edd | RHSA-2025:1673 | Feb 19, 2025 |
| mecab · almalinux 8 | 0.996-2.module_el8.10.0+3965+b415b607 | ALSA-2025:1673 | Feb 19, 2025 |
| mecab · ol 8 | 0:0.996-2.module+el8.10.0+90521+d5cc5c65 | ELSA-2025-1673 | Feb 20, 2025 |
| mecab · rocky 8 | 0:0.996-2.module+el8.10.0+1676+9b4b6e24 | RLSA-2025:1673 | Feb 26, 2025 |
| mecab-devel · RHEL 8 | 0:0.996-2.module+el8.10.0+22857+7f331edd | RHSA-2025:1673 | Feb 19, 2025 |
| mecab-devel · almalinux 8 | 0.996-2.module_el8.10.0+3965+b415b607 | ALSA-2025:1673 | Feb 19, 2025 |
| mecab-devel · ol 8 | 0:0.996-2.module+el8.10.0+90521+d5cc5c65 | ELSA-2025-1673 | Feb 20, 2025 |
| mecab-ipadic · RHEL 8 | 0:2.7.0.20070801-17.module+el8.10.0+22857+7f331edd | RHSA-2025:1673 | Feb 19, 2025 |
| mecab-ipadic · almalinux 8 | 2.7.0.20070801-17.module_el8.10.0+3965+b415b607 | ALSA-2025:1673 | Feb 19, 2025 |
| mecab-ipadic · ol 8 | 0:2.7.0.20070801-17.0.1.module+el8.10.0+90521+d5cc5c65 | ELSA-2025-1673 | Feb 20, 2025 |
| mecab-ipadic · rocky 8 | 0:2.7.0.20070801-17.module+el8.10.0+1937+28fbbc83 | RLSA-2025:1673 | Feb 26, 2025 |
| mecab-ipadic-EUCJP · RHEL 8 | 0:2.7.0.20070801-17.module+el8.10.0+22857+7f331edd | RHSA-2025:1673 | Feb 19, 2025 |
| mecab-ipadic-EUCJP · almalinux 8 | 2.7.0.20070801-17.module_el8.10.0+3965+b415b607 | ALSA-2025:1673 | Feb 19, 2025 |
| mecab-ipadic-EUCJP · ol 8 | 0:2.7.0.20070801-17.0.1.module+el8.10.0+90521+d5cc5c65 | ELSA-2025-1673 | Feb 20, 2025 |
| mingw-openssl · rocky 8 | 0:1.0.2k-4.el8_10 | RLSA-2026:60329 | Aug 27, 2026 |
| mingw32-openssl · RHEL 8 | 0:1.0.2k-4.el8_10 | RHSA-2026:60329 | Aug 28, 2026 |
| mingw32-openssl · almalinux 8 | 1.0.2k-4.el8_10 | ALSA-2026:60329 | Aug 26, 2026 |
| mingw32-openssl · ol 8 | 0:1.0.2k-4.el8_10 | ELSA-2026-60329-0 | Aug 27, 2026 |
| mingw64-openssl · RHEL 8 | 0:1.0.2k-4.el8_10 | RHSA-2026:60329 | Aug 28, 2026 |
| mingw64-openssl · almalinux 8 | 1.0.2k-4.el8_10 | ALSA-2026:60329 | Aug 26, 2026 |
| mingw64-openssl · ol 8 | 0:1.0.2k-4.el8_10 | ELSA-2026-60329-0 | Aug 27, 2026 |
| mysql · RHEL 8 | 0:8.0.41-1.module+el8.10.0+22857+7f331edd | RHSA-2025:1673 | Feb 19, 2025 |
| mysql · RHEL 9 | 0:8.0.41-2.el9_5 | RHSA-2025:1671 | Feb 19, 2025 |
| mysql · almalinux 8 | 8.0.41-1.module_el8.10.0+3965+b415b607 | ALSA-2025:1673 | Feb 19, 2025 |
| mysql · almalinux 9 | 8.0.41-2.el9_5 | ALSA-2025:1671 | Feb 19, 2025 |
| mysql · ol 8 | 0:8.0.41-1.module+el8.10.0+90521+d5cc5c65 | ELSA-2025-1673 | Feb 20, 2025 |
| mysql · ol 9 | 0:8.0.41-2.el9_5 | ELSA-2025-1671 | Feb 21, 2025 |
| mysql · rocky 8 | 0:8.0.41-1.module+el8.10.0+1937+28fbbc83.0.1 | RLSA-2025:1673 | Feb 26, 2025 |
| mysql · rocky 9 | 0:8.0.41-2.el9_5 | RLSA-2025:1671 | Mar 17, 2025 |
| mysql-common · RHEL 8 | 0:8.0.41-1.module+el8.10.0+22857+7f331edd | RHSA-2025:1673 | Feb 19, 2025 |
| mysql-common · RHEL 9 | 0:8.0.41-2.el9_5 | RHSA-2025:1671 | Feb 19, 2025 |
| mysql-common · almalinux 8 | 8.0.41-1.module_el8.10.0+3965+b415b607 | ALSA-2025:1673 | Feb 19, 2025 |
| mysql-common · almalinux 9 | 8.0.41-2.el9_5 | ALSA-2025:1671 | Feb 19, 2025 |
| mysql-common · ol 8 | 0:8.0.41-1.module+el8.10.0+90521+d5cc5c65 | ELSA-2025-1673 | Feb 20, 2025 |
| mysql-common · ol 9 | 0:8.0.41-2.el9_5 | ELSA-2025-1671 | Feb 21, 2025 |
| mysql-devel · RHEL 8 | 0:8.0.41-1.module+el8.10.0+22857+7f331edd | RHSA-2025:1673 | Feb 19, 2025 |
| mysql-devel · RHEL 9 | 0:8.0.41-2.el9_5 | RHSA-2025:1671 | Feb 19, 2025 |
| mysql-devel · almalinux 8 | 8.0.41-1.module_el8.10.0+3965+b415b607 | ALSA-2025:1673 | Feb 19, 2025 |
| mysql-devel · almalinux 9 | 8.0.41-2.el9_5 | ALSA-2025:1671 | Feb 19, 2025 |
| mysql-devel · ol 8 | 0:8.0.41-1.module+el8.10.0+90521+d5cc5c65 | ELSA-2025-1673 | Feb 20, 2025 |
| mysql-devel · ol 9 | 0:8.0.41-2.el9_5 | ELSA-2025-1671 | Feb 21, 2025 |
| mysql-errmsg · RHEL 8 | 0:8.0.41-1.module+el8.10.0+22857+7f331edd | RHSA-2025:1673 | Feb 19, 2025 |
| mysql-errmsg · RHEL 9 | 0:8.0.41-2.el9_5 | RHSA-2025:1671 | Feb 19, 2025 |
| mysql-errmsg · almalinux 8 | 8.0.41-1.module_el8.10.0+3965+b415b607 | ALSA-2025:1673 | Feb 19, 2025 |
| mysql-errmsg · almalinux 9 | 8.0.41-2.el9_5 | ALSA-2025:1671 | Feb 19, 2025 |
| mysql-errmsg · ol 8 | 0:8.0.41-1.module+el8.10.0+90521+d5cc5c65 | ELSA-2025-1673 | Feb 20, 2025 |
| mysql-errmsg · ol 9 | 0:8.0.41-2.el9_5 | ELSA-2025-1671 | Feb 21, 2025 |
| mysql-libs · RHEL 8 | 0:8.0.41-1.module+el8.10.0+22857+7f331edd | RHSA-2025:1673 | Feb 19, 2025 |
| mysql-libs · RHEL 9 | 0:8.0.41-2.el9_5 | RHSA-2025:1671 | Feb 19, 2025 |
| mysql-libs · almalinux 8 | 8.0.41-1.module_el8.10.0+3965+b415b607 | ALSA-2025:1673 | Feb 19, 2025 |
| mysql-libs · almalinux 9 | 8.0.41-2.el9_5 | ALSA-2025:1671 | Feb 19, 2025 |
| mysql-libs · ol 8 | 0:8.0.41-1.module+el8.10.0+90521+d5cc5c65 | ELSA-2025-1673 | Feb 20, 2025 |
| mysql-libs · ol 9 | 0:8.0.41-2.el9_5 | ELSA-2025-1671 | Feb 21, 2025 |
| mysql-server · RHEL 8 | 0:8.0.41-1.module+el8.10.0+22857+7f331edd | RHSA-2025:1673 | Feb 19, 2025 |
| mysql-server · RHEL 9 | 0:8.0.41-2.el9_5 | RHSA-2025:1671 | Feb 19, 2025 |
| mysql-server · almalinux 8 | 8.0.41-1.module_el8.10.0+3965+b415b607 | ALSA-2025:1673 | Feb 19, 2025 |
| mysql-server · almalinux 9 | 8.0.41-2.el9_5 | ALSA-2025:1671 | Feb 19, 2025 |
| mysql-server · ol 8 | 0:8.0.41-1.module+el8.10.0+90521+d5cc5c65 | ELSA-2025-1673 | Feb 20, 2025 |
| mysql-server · ol 9 | 0:8.0.41-2.el9_5 | ELSA-2025-1671 | Feb 21, 2025 |
| mysql-test · RHEL 8 | 0:8.0.41-1.module+el8.10.0+22857+7f331edd | RHSA-2025:1673 | Feb 19, 2025 |
| mysql-test · RHEL 9 | 0:8.0.41-2.el9_5 | RHSA-2025:1671 | Feb 19, 2025 |
| mysql-test · almalinux 8 | 8.0.41-1.module_el8.10.0+3965+b415b607 | ALSA-2025:1673 | Feb 19, 2025 |
| mysql-test · almalinux 9 | 8.0.41-2.el9_5 | ALSA-2025:1671 | Feb 19, 2025 |
| mysql-test · ol 8 | 0:8.0.41-1.module+el8.10.0+90521+d5cc5c65 | ELSA-2025-1673 | Feb 20, 2025 |
| mysql-test · ol 9 | 0:8.0.41-2.el9_5 | ELSA-2025-1671 | Feb 21, 2025 |
| openssl · Debian 12.15 (bookworm) | 3.0.15-1~deb12u1 | DEBIAN-CVE-2024-5535 | Jun 27, 2024 |
| openssl · Debian 13.5 (trixie) | 3.3.2-1 | DEBIAN-CVE-2024-5535 | Jun 27, 2024 |
| openssl · Debian 14 | 3.3.2-1 | DEBIAN-CVE-2024-5535 | Jun 27, 2024 |
| openssl · RHEL 8 | 1:1.1.1k-14.el8_6 | RHSA-2024:7848 | Oct 9, 2024 |
| openssl · RHEL 9 | 1:3.2.2-6.el9_5 | RHSA-2024:9333 | Nov 12, 2024 |
| openssl · Ubuntu 18.04.6 LTS (bionic) | 1.1.1-1ubuntu2.1~18.04.23+esm10 | openssl 1.1.1-1ubuntu2.1~18.04.23+esm10 | Aug 27, 2026 |
| openssl · Ubuntu 20.04 LTS (focal) | 1.1.1f-1ubuntu2.23 | openssl 1.1.1f-1ubuntu2.23 | Jun 27, 2024 |
| openssl · Ubuntu 22.04.1 LTS (jammy) | 3.0.2-0ubuntu1.17 | openssl 3.0.2-0ubuntu1.17 | Jun 27, 2024 |
| openssl · Ubuntu 24.04.5 LTS (noble) | 3.0.13-0ubuntu3.2 | openssl 3.0.13-0ubuntu3.2 | Jun 27, 2024 |
| openssl · Ubuntu 24.10 (oracular) | 3.2.2-1ubuntu2 | openssl 3.2.2-1ubuntu2 | Jan 16, 2026 |
| openssl · Ubuntu 25.04 (plucky) | 3.2.2-1ubuntu2 | openssl 3.2.2-1ubuntu2 | Jan 16, 2026 |
| openssl · almalinux 8 | 1:1.1.1k-14.el8_6 | ALSA-2024:7848 | Oct 9, 2024 |
| openssl · almalinux 9 | 1:3.2.2-6.el9_5 | ALSA-2024:9333 | Nov 12, 2024 |
| openssl · amzn 2023 | 1:3.0.8-1.amzn2023.0.14 | ALAS2023-2024-677 | Aug 1, 2024 |
| openssl · ol 8 | 1:1.1.1k-14.el8_6 | ELSA-2024-7848 | Oct 9, 2024 |
| openssl · ol 9 | 1:3.2.2-6.0.1.el9_5 | ELSA-2024-9333 | Nov 14, 2024 |
| openssl · rocky 8 | 1:1.1.1k-14.el8_10 | RLSA-2024:7848 | Oct 25, 2024 |
| openssl · rocky 9 | 1:3.2.2-6.el9_5.1 | RLSA-2024:9333 | Mar 17, 2025 |
| openssl-1_0_0 · opensuse-leap 15.6 | 1.0.2p-150000.3.94.1 | SUSE-SU-2024:3119-1 | Sep 3, 2024 |
| openssl-1_0_0 · sles 15.6 | 1.0.2p-150000.3.94.1 | SUSE-SU-2024:3119-1 | Sep 3, 2024 |
| openssl-1_1 · opensuse-leap 15.6 | 1.1.1w-150600.5.6.1 | SUSE-SU-2024:2933-1 | Aug 15, 2024 |
| openssl-1_1 · sles 15.6 | 1.1.1w-150600.5.6.1 | SUSE-SU-2024:2933-1 | Aug 15, 2024 |
| openssl-3 · opensuse-leap 15.6 | 3.1.4-150600.5.10.1 | SUSE-SU-2024:2635-1 | Jul 30, 2024 |
| openssl-3 · sles 15.6 | 3.1.4-150600.5.10.1 | SUSE-SU-2024:2635-1 | Jul 30, 2024 |
| openssl-3-livepatches · sles 15.6 | 0.1-150600.13.3.1 | SUSE-SU-2024:2761-1 | Aug 6, 2024 |
| openssl-debuginfo · amzn 2023 | 1:3.0.8-1.amzn2023.0.14 | ALAS2023-2024-677 | Aug 1, 2024 |
| openssl-debugsource · amzn 2023 | 1:3.0.8-1.amzn2023.0.14 | ALAS2023-2024-677 | Aug 1, 2024 |
| openssl-devel · RHEL 8 | 1:1.1.1k-14.el8_6 | RHSA-2024:7848 | Oct 9, 2024 |
| openssl-devel · RHEL 9 | 1:3.2.2-6.el9_5 | RHSA-2024:9333 | Nov 12, 2024 |
| openssl-devel · almalinux 8 | 1:1.1.1k-14.el8_6 | ALSA-2024:7848 | Oct 9, 2024 |
| openssl-devel · almalinux 9 | 1:3.2.2-6.el9_5 | ALSA-2024:9333 | Nov 12, 2024 |
| openssl-devel · amzn 2023 | 1:3.0.8-1.amzn2023.0.14 | ALAS2023-2024-677 | Aug 1, 2024 |
| openssl-devel · ol 8 | 1:1.1.1k-14.el8_6 | ELSA-2024-7848 | Oct 9, 2024 |
| openssl-devel · ol 9 | 1:3.2.2-6.0.1.el9_5 | ELSA-2024-9333 | Nov 14, 2024 |
| openssl-fips-provider · ol 9 | 0:3.0.7-6.0.1.el9_5 | ELSA-2024-9333 | Nov 14, 2024 |
| openssl-fips-provider · rocky 9 | 0:3.0.7-6.el9_5 | RLSA-2024:9333 | Mar 17, 2025 |
| openssl-fips-provider-so · ol 9 | 0:3.0.7-6.0.1.el9_5 | ELSA-2024-9333 | Nov 14, 2024 |
| openssl-libs · RHEL 8 | 1:1.1.1k-14.el8_6 | RHSA-2024:7848 | Oct 9, 2024 |
| openssl-libs · RHEL 9 | 1:3.2.2-6.el9_5 | RHSA-2024:9333 | Nov 12, 2024 |
| openssl-libs · almalinux 8 | 1:1.1.1k-14.el8_6 | ALSA-2024:7848 | Oct 9, 2024 |
| openssl-libs · almalinux 9 | 1:3.2.2-6.el9_5 | ALSA-2024:9333 | Nov 12, 2024 |
| openssl-libs · amzn 2023 | 1:3.0.8-1.amzn2023.0.14 | ALAS2023-2024-677 | Aug 1, 2024 |
| openssl-libs · ol 8 | 1:1.1.1k-14.el8_6 | ELSA-2024-7848 | Oct 9, 2024 |
| openssl-libs · ol 9 | 1:3.2.2-6.0.1.el9_5 | ELSA-2024-9333 | Nov 14, 2024 |
| openssl-libs-debuginfo · amzn 2023 | 1:3.0.8-1.amzn2023.0.14 | ALAS2023-2024-677 | Aug 1, 2024 |
| openssl-perl · RHEL 8 | 1:1.1.1k-14.el8_6 | RHSA-2024:7848 | Oct 9, 2024 |
| openssl-perl · RHEL 9 | 1:3.2.2-6.el9_5 | RHSA-2024:9333 | Nov 12, 2024 |
| openssl-perl · almalinux 8 | 1:1.1.1k-14.el8_6 | ALSA-2024:7848 | Oct 9, 2024 |
| openssl-perl · almalinux 9 | 1:3.2.2-6.el9_5 | ALSA-2024:9333 | Nov 12, 2024 |
| openssl-perl · amzn 2023 | 1:3.0.8-1.amzn2023.0.14 | ALAS2023-2024-677 | Aug 1, 2024 |
| openssl-perl · ol 8 | 1:1.1.1k-14.el8_6 | ELSA-2024-7848 | Oct 9, 2024 |
| openssl-perl · ol 9 | 1:3.2.2-6.0.1.el9_5 | ELSA-2024-9333 | Nov 14, 2024 |
| openssl-snapsafe-libs · amzn 2023 | 1:3.0.8-1.amzn2023.0.14 | ALAS2023-2024-677 | Aug 1, 2024 |
| openssl-snapsafe-libs-debuginfo · amzn 2023 | 1:3.0.8-1.amzn2023.0.14 | ALAS2023-2024-677 | Aug 1, 2024 |
| openssl-static · ol 8 | 2:1.1.1k-14.ksplice1.el8_6 | ELSA-2024-12786 | Oct 22, 2024 |
| openssl1.0 · Ubuntu 18.04.6 LTS (bionic) | 1.0.2n-1ubuntu5.13+esm6 | openssl1.0 1.0.2n-1ubuntu5.13+esm6 | Aug 27, 2026 |
| ovmf · Ubuntu 22.04.1 LTS (jammy) | 2022.02-3ubuntu0.22.04.4 | ovmf 2022.02-3ubuntu0.22.04.4 | Aug 12, 2025 |
| ovmf · Ubuntu 24.04.5 LTS (noble) | 2024.02-2ubuntu0.6 | ovmf 2024.02-2ubuntu0.6 | Aug 12, 2025 |
| ovmf-ia32 · Ubuntu 22.04.1 LTS (jammy) | 2022.02-3ubuntu0.22.04.4 | ovmf-ia32 2022.02-3ubuntu0.22.04.4 | Aug 12, 2025 |
| ovmf-ia32 · Ubuntu 24.04.5 LTS (noble) | 2024.02-2ubuntu0.6 | ovmf-ia32 2024.02-2ubuntu0.6 | Aug 12, 2025 |
| qemu-efi · Ubuntu 22.04.1 LTS (jammy) | 2022.02-3ubuntu0.22.04.4 | qemu-efi 2022.02-3ubuntu0.22.04.4 | Aug 12, 2025 |
| qemu-efi-aarch64 · Ubuntu 22.04.1 LTS (jammy) | 2022.02-3ubuntu0.22.04.4 | qemu-efi-aarch64 2022.02-3ubuntu0.22.04.4 | Aug 12, 2025 |
| qemu-efi-aarch64 · Ubuntu 24.04.5 LTS (noble) | 2024.02-2ubuntu0.6 | qemu-efi-aarch64 2024.02-2ubuntu0.6 | Aug 12, 2025 |
| qemu-efi-arm · Ubuntu 22.04.1 LTS (jammy) | 2022.02-3ubuntu0.22.04.4 | qemu-efi-arm 2022.02-3ubuntu0.22.04.4 | Aug 12, 2025 |
| qemu-efi-arm · Ubuntu 24.04.5 LTS (noble) | 2024.02-2ubuntu0.6 | qemu-efi-arm 2024.02-2ubuntu0.6 | Aug 12, 2025 |
| qemu-efi-riscv64 · Ubuntu 24.04.5 LTS (noble) | 2024.02-2ubuntu0.6 | qemu-efi-riscv64 2024.02-2ubuntu0.6 | Aug 12, 2025 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.