critical
CVE-2024-0901
Remotely executed SEGV and out of bounds read allows malicious packet ...
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Julia9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Trivy's own label is CRITICAL. Rated critical by NVD, Azure Linux, Julia.
Description
Remotely executed SEGV and out of bounds read allows malicious packet sender to crash or cause an out of bounds read via sending a malformed packet with the correct length.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| Azure Linux 3.0 | mariadb | 0:10.11.6-3.azl3 |
| julia::Julia Ecosystem Security Advisories | wolfSSL_jll | 5.7.2+0 |
| alpine 3.20 | wolfssl | 5.7.0-r0 |
| alpine 3.21 | wolfssl | 5.7.0-r0 |
| alpine 3.22 | wolfssl | 5.7.0-r0 |
| alpine 3.23 | wolfssl | 5.7.0-r0 |
| alpine 3.24 | wolfssl | 5.7.0-r0 |
| alpine edge | wolfssl | 5.7.0-r0 |
| debian 11 | wolfssl | no fix listed |
| debian 12 | wolfssl | no fix listed |
| debian 13 | wolfssl | 5.7.0-0.3 |
| echo | wolfssl | 5.7.0-0.3 |
Show all 14 entries from 14 sources
| Source | Package | Fixed in |
|---|---|---|
| Azure Linux 3.0 | mariadb | 0:10.11.6-3.azl3 |
| julia::Julia Ecosystem Security Advisories | wolfSSL_jll | 5.7.2+0 |
| alpine 3.20 | wolfssl | 5.7.0-r0 |
| alpine 3.21 | wolfssl | 5.7.0-r0 |
| alpine 3.22 | wolfssl | 5.7.0-r0 |
| alpine 3.23 | wolfssl | 5.7.0-r0 |
| alpine 3.24 | wolfssl | 5.7.0-r0 |
| alpine edge | wolfssl | 5.7.0-r0 |
| debian 11 | wolfssl | no fix listed |
| debian 12 | wolfssl | no fix listed |
| debian 13 | wolfssl | 5.7.0-0.3 |
| echo | wolfssl | 5.7.0-0.3 |
| rapidfort debian 12 | wolfssl | 0:5.7.0-0.3 |
| rapidfort debian 13 | wolfssl | 0:5.7.0-0.3 |