CVE-2024-33617CWE-691

Insufficient control flow management in some Intel(R) QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access

High · published November 13, 2024

CVSS v4.0
8.2
EPSS
0%
Percentile
38.5
In the wild
Unconfirmed
What it is

Insufficient control flow management in some Intel(R) QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access.

The record
Technical detail
CVSS v4.0
8.2 · HIGH
Vector
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00455 · 38.5th percentile
Weakness
CWE-691 · Insufficient Control Flow Management
Published
2024-11-13T21:10Z
EPSS history
Timeline
  • 13 NOV 21:10Z
    Insufficient control flow management in some Intel(R) QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access
    cvelistv5