CVE-2024-33617

Summary

CVE-2024-33617 is a newly disclosed vulnerability affecting some versions of OpenSSL software that utilizes Intel(R) QuickAssist Technology (QAT) Engine. The issue stems from insufficient control flow management within the Intel QAT Engine, potentially enabling an attacker to disclose sensitive information via network access. This vulnerability poses a risk to systems running affected OpenSSL versions and could lead to unauthorized data leakage. Organizations are advised to update to OpenSSL v1.6.1 or a patched version as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.