一、漏洞信息
漏洞编号：CVE-2024-2511
漏洞归属组件：openssl
漏洞归属的版本：0.9.6m,0.9.7d,0.9.7l,0.9.7n,0.9.8f,0.9.8g,0.9.8zi,1.0.0u,1.0.1v,1.0.2v,1.1.0,1.1.1f,1.1.1k,1.1.1l,1.1.1m,1.1.1wa,3.0.7,3.0.8,3.0
CVSS V3.0分值：
BaseScore：5.9 Medium
Vector：CVSS：3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
漏洞简述：
Issue summary: Some non-default TLS server configurations can cause unboundedmemory growth when processing TLSv1.3 sessionsImpact summary: An attacker may exploit certain server configurations to triggerunbounded memory growth that would lead to a Denial of ServiceThis problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option isbeing used (but not if early_data support is also configured and the defaultanti-replay protection is in use). In this case, under certain conditions, thesession cache can get into an incorrect state and it will fail to flush properlyas it fills. The session cache will continue to grow in an unbounded manner. Amalicious client could deliberately create the scenario for this failure toforce a Denial of Service. It may also happen by accident in normal operation.This issue only affects TLS servers supporting TLSv1.3. It does not affect TLSclients.The FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL1.0.2 is also not affected by this issue.
漏洞公开时间：2024-04-08 22:15:07
漏洞创建时间：2024-04-08 22:43:35
漏洞详情参考链接：
https://nvd.nist.gov/vuln/detail/CVE-2024-2511

漏洞分析指导链接：
https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
漏洞数据来源:
其它
漏洞补丁信息：

二、漏洞分析结构反馈
影响性分析说明：
在某些条件下，会话缓存可能会进入不正确的状态，并且它无法在填满时正确清空，导致会话缓存继续增长。恶意客户端可能会故意制造此故障的场景，以强制拒绝服务。在正常操作中也可能意外发生。此问题仅影响支持TLSv1.3的TLS服务器，不影响TLS客户端。
openEuler评分：
5.9
Vector：CVSS：2.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
受影响版本排查(受影响/不受影响)：
1.master(3.0.7):受影响
2.openEuler-20.03-LTS-SP1(1.1.1f):受影响
3.openEuler-20.03-LTS-SP4(1.1.1f):受影响
4.openEuler-22.03-LTS(1.1.1m):受影响
5.openEuler-22.03-LTS-Next(1.1.1l):受影响
6.openEuler-22.03-LTS-SP1(1.1.1m):受影响
7.openEuler-22.03-LTS-SP2(1.1.1m):受影响
8.openEuler-22.03-LTS-SP3(1.1.1wa):受影响
9.openEuler-24.03-LTS:受影响
10.openEuler-24.03-LTS-Next:受影响

修复是否涉及abi变化(是/否)：
1.master(3.0.7):否
2.openEuler-20.03-LTS-SP1(1.1.1f):否
3.openEuler-20.03-LTS-SP4(1.1.1f):否
4.openEuler-22.03-LTS(1.1.1m):否
5.openEuler-22.03-LTS-Next(1.1.1l):否
6.openEuler-22.03-LTS-SP1(1.1.1m):否
7.openEuler-22.03-LTS-SP2(1.1.1m):否
8.openEuler-22.03-LTS-SP3(1.1.1wa):否
9.openEuler-24.03-LTS:否
10.openEuler-24.03-LTS-Next:否

三、漏洞修复
安全公告链接：https://www.openeuler.org/zh/security/safety-bulletin/detail/?id=openEuler-SA-2024-1531