This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.

[TLP:CLEAR] OpenSSL fixes a high-severity vulnerability

OpenSSL versions 3.4.1, 3.3.3 and 3.2.4 fix a high-severity vulnerability [1]. The FIPS modules 3.4, 3.3, 3.2, 3.1 and 3.0, as well as OpenSSL 3.1, 3.0, 1.1.1 and 1.0.2, are not affected. The fixes are also available in the OpenSSL git repository in the commits: 738d4f9 - 3.4.1 [2], 87ebd20 - 3.3.3 [3], 798779d - 3.2.4 [4]. Among operating systems, fixes have been released, for example, by: Slackware - for the current branch in openssl-3.4.1 [5][6], the stable one is not affected; Red Hat - for Red Hat Enterprise Linux 9, others are not affected [7]; Debian - for the sid release in version 3.4.1-1, the bullseye and bookworm releases are not affected [8]; Ubuntu - in version 3.3.1-2ubuntu2.1 for the oracular release, others are not affected [9]; Gentoo - has some versions for various architectures available as stable or testing [10]; SUSE - for SUSE Liberty Linux 9 in 3.2.2-6.el9_5.1 [11].

OpenSSL - man-in-the-middle (CVE-2024-12797)
CVSS 7.4 (High)

Due to a flaw in the SSL_VERIFY_PEER verification mechanism, where the handshake does not fail when server authentication fails, an unauthenticated remote attacker can carry out a man-in-the-middle attack on clients using RFC7250 Raw Public Keys (RPKs) [1][12]. RPKs are disabled by default in both TLS clients and servers. Systems are vulnerable only if the TLS client explicitly enables RPKs for server authentication and the server is at the same time configured to send an RPK instead of a standard X.509 certificate. The verification result can be checked manually using SSL_get_verify_result() [1].

The vulnerability is present in product:

  • *:OpenSSL;>=3.2,<3.2.4;>=3.3,<3.3.3;>=3.4,<3.4.1

CVSS: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

More information:

The vulnerability was publicly disclosed 11. 2. 2025.

By CESNET, z.s.p.o. Michaela Ručková on 13. 2. 2025.

CESNET, z.s.p.o. Logo