high 8.8

CVE-2024-9143 json

Low-level invalid GF(2^m) parameters lead to OOB memory access

published 2024-10-16 2 y ago modified 2026-11-06 2 d ago also EUVD-2024-49755 , GHSA-q764-r57m-9wp9 , JLSEC-2026-254

cvss: 8.8; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 9.0%; EPSS 9.0% chance of exploitation in 30 days, percentile 95%
public exploits: 0; none known

Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted explicit values for the field polynomial can lead to out-of-bounds memory reads or writes.

Impact summary: Out of bound memory writes can lead to an application crash or even a possibility of a remote code execution, however, in all the protocols involving Elliptic Curve Cryptography that we're aware of, either only "named curves" are supported, or, if explicit curve parameters are supported, they specify an X9.62 encoding of binary (GF(2^m)) curves that can't represent problematic input values. Thus the likelihood of existence of a vulnerable application is low.

In particular, the X9.62 encoding is used for ECC keys in X.509 certificates, so problematic inputs cannot occur in the context of processing X.509 certificates. Any problematic use-cases would have to be using an "exotic" curve encoding.

The affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(), and various supporting BN_GF2m_*() functions.

Applications working with "exotic" explicit binary (GF(2^m)) curve parameters, that make it possible to represent invalid field polynomials with a zero constant term, via the above or similar APIs, may terminate abruptly as a result of reading or writing outside of array bounds. Remote code execution cannot easily be ruled out.

The FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.

Patch / fix

fixed in 8 distros 4 links 6

julia OpenSSL_jll 3.0.16+0
julia Openresty_jll 1.29.203+0
OpenSSL OpenSSL 1.0.2zl, 1.1.1zb, 3.0.16, 3.1.8, 3.2.4, 3.3.3
Siemens SIDIS Prime V4.0.700
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP V3.1.5
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP V3.1.5
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem V1.1.1
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP V3.1.5

debian ubuntu opensuse alpine

openssl Debian 12 3.0.15-1~deb12u1
openssl Debian 14, Debian 13 3.3.2-2

debian advisories DEBIAN-CVE-2024-9143

edk2 Ubuntu 22.04 LTS 2022.02-3ubuntu0.22.04.4
edk2 Ubuntu 24.04 LTS 2024.02-2ubuntu0.6
openssl Ubuntu 20.04 LTS 1.1.1f-1ubuntu2.24
openssl Ubuntu 22.04 LTS 3.0.2-0ubuntu1.19
openssl Ubuntu 24.04 LTS 3.0.13-0ubuntu3.5
openssl Ubuntu Pro FIPS-updates 20.04 LTS 1.1.1f-1ubuntu2.fips.24
openssl Ubuntu Pro FIPS-updates 22.04 LTS 3.0.2-0ubuntu1.19+Fips1
openssl-fips Ubuntu Pro FIPS-updates 24.04 LTS 3.0.13-0ubuntu3.6+Fips1

ubuntu advisories UBUNTU-CVE-2024-9143

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

openssl-3 openSUSE Tumbleweed 3.1.4-15.1

opensuse advisories openSUSE-SU-2024:14416-1

openssl Alpine 3.17 3.0.15-r1
openssl Alpine 3.19, Alpine 3.18 3.1.7-r1
openssl Alpine 3.20 3.3.2-r1
openssl Alpine 3.24, Alpine 3.23, Alpine 3.22 +1 more 3.3.2-r3

alpine advisories ALPINE-CVE-2024-9143

Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

github.com/openssl/openssl@c0d3e4d commit
github.com/openssl/openssl@bc7e04d commit
github.com/openssl/openssl@fdf6723 commit
github.com/openssl/openssl@72ae83a commit
github.openssl.org/openssl/extended-releases@8efc0cb commit
github.openssl.org/openssl/extended-releases@9d57699 commit

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2024-9143 updated 2026-11-07 cvss 3.7

openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access

Red Hat Logging Subsystem for Red Hat OpenShift openshift-logging/fluentd-rhel8 Red Hat 3scale API Management Platform 2 3scale-amp2/backend-rhel8
affected: no fix available “Fix deferred”
Red Hat Enterprise Linux 6 openssl, openssl-perl
affected: no fix planned “Out of support scope”
Red Hat Enterprise Linux 7 ovmf, OVMF, AAVMF Red Hat Enterprise Linux 8 edk2, shim, shim-x64, edk2-ovmf, shim-aa64, shim-ia32, +5 more Red Hat Enterprise Linux 9 edk2, shim, shim-x64, edk2-ovmf, shim-aa64, edk2-tools, +3 more Red Hat Enterprise Linux 10 edk2, shim Red Hat JBoss Core Services jbcs-httpd24-openssl
affected: no fix available “Fix deferred”
Red Hat Enterprise Linux 7 openssl, openssl-libs, openssl-perl Red Hat Enterprise Linux 8 openssl, openssl-libs, openssl-perl, compat-openssl10 Red Hat Enterprise Linux 9 openssl, openssl-libs, openssl-perl, compat-openssl11 Red Hat Enterprise Linux 10 openssl
not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

cisa ICSA-24-102-01 updated 2026-05-14 cvss 4.3

Siemens SIMATIC S7-1500 TM MFP

Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem
affected: mitigation, no fix available

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

cisa ICSA-23-348-10 updated 2025-08-12 cvss 4.3

Siemens SIMATIC S7-1500

Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0) >= 3.1.0, < 3.1.5 Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0) >= 3.1.0, < 3.1.5 Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0) >= 3.1.0, < 3.1.5 Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0) >= 3.1.0, < 3.1.5 Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0) >= 3.1.0, < 3.1.5
affected: fixed in V3.1.5, mitigation support.industry.siemens.com

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

cisa ICSA-25-044-09 updated 2025-05-06 cvss 4.3

Siemens SCALANCE W700 IEEE 802.11ax

Siemens SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0) <V3.0.0 Siemens SCALANCE WAM763-1 (6GK5763-1AL00-7DA0) <V3.0.0 Siemens SCALANCE WAM763-1 (ME) (6GK5763-1AL00-7DC0) <V3.0.0 Siemens SCALANCE WAM763-1 (US) (6GK5763-1AL00-7DB0) <V3.0.0 Siemens SCALANCE WAM766-1 (6GK5766-1GE00-7DA0) <V3.0.0 Siemens SCALANCE WAM766-1 (ME) (6GK5766-1GE00-7DC0) <V3.0.0

+13 more productsfewer

Siemens SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0) <V3.0.0 Siemens SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0) <V3.0.0 Siemens SCALANCE WAM766-1 EEC (ME) (6GK5766-1GE00-7TC0) <V3.0.0 Siemens SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0) <V3.0.0 Siemens SCALANCE WUB762-1 (6GK5762-1AJ00-1AA0) <V3.0.0 Siemens SCALANCE WUB762-1 iFeatures (6GK5762-1AJ00-2AA0) <V3.0.0 Siemens SCALANCE WUM763-1 (6GK5763-1AL00-3AA0) <V3.0.0 Siemens SCALANCE WUM763-1 (6GK5763-1AL00-3DA0) <V3.0.0 Siemens SCALANCE WUM763-1 (US) (6GK5763-1AL00-3AB0) <V3.0.0 Siemens SCALANCE WUM763-1 (US) (6GK5763-1AL00-3DB0) <V3.0.0 Siemens SCALANCE WUM766-1 (6GK5766-1GE00-3DA0) <V3.0.0 Siemens SCALANCE WUM766-1 (ME) (6GK5766-1GE00-3DC0) <V3.0.0 Siemens SCALANCE WUM766-1 (USA) (6GK5766-1GE00-3DB0) <V3.0.0

affected: fixed in V3.0.0 support.industry.siemens.com

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

cisa ICSA-25-100-02 updated 2025-05-06 cvss 4.3

Siemens SIDIS Prime

Siemens SIDIS Prime <V4.0.700
affected: fixed in V4.0.700

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

CISA SSVC

Exploitation: none
Automatable: no
Technical impact: total
Assessed: 2 d ago (2026-11-06)

Exploit prediction

9.00% chance of exploitation in the next 30 days, higher than 95% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
CISA ADP	3.1	8.8	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CNA	3.1	8.8	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
OSV	3.1	4.3	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Affected packages

ecosystem	package	affected	fixed in
julia	OpenSSL_jll	<3.0.16+0	3.0.16+0
julia	Openresty_jll	<1.29.203+0	1.29.203+0

Affected products

OpenSSL OpenSSL
Siemens SIDIS Prime
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP

Classification

Weakness

CWE-125 Out-of-bounds Read
CWE-787 Out-of-bounds Write

Technology feeds

OpenSSL rss critical rss

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.

Summary

Patch / fix

Vendor advisories

CISA SSVC

Exploit prediction

CVSS scores

Affected packages

Affected products

Classification

References

Sources