High severity7.5NVD Advisory· Published Jan 23, 2025· Updated Apr 15, 2026

CVE-2024-53379

Description

Heap buffer overflow in the server site handshake implementation in Real Time Logic LLC's SharkSSL version (from 05/05/24) commit 64808a5e12c83b38f85c943dee0112e428dc2a43 allows a remote attacker to trigger a Denial-of-Service via a malformed Client-Hello message.

Affected products

Barracudadrive/Sharksslinferred2 versions
= 64808a5e12c83b38f85c943dee0112e428dc2a43+ 1 more
- (no CPE)range: = 64808a5e12c83b38f85c943dee0112e428dc2a43
- (no CPE)range: commit 64808a5e12c83b38f85c943dee0112e428dc2a43 (from 05/05/24)

Patches

Vulnerability mechanics

References

www.telekom.com/resource/blob/1086326/e6e800ec1e4e675ca0d8fdafab86ea8c/dl-250122-cve-2024-53379-data.pdfnvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000