CVE-2024-0727

Medium

Published: —Translated: 06/07/2026(UTC)NVD NIST

Summary

Processing a maliciously formatted PKCS12 file may cause OpenSSL to crash, leading to a potential Denial of Service attack. Applications loading PKCS12 files from untrusted sources might terminate abruptly.

Risk Assessment

The risk is that an attacker can provide a specially crafted PKCS12 file which, when loaded by an application, causes it to crash, potentially leading to service disruption and system unavailability.

Recommendation

It is recommended to immediately update OpenSSL to a version that includes the fix for CVE-2024-0727. Also, avoid loading PKCS12 files from untrusted sources until the update is applied.

Original NVD description (English source)

Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact summary: Applications loading files in the PKCS12 format from untrusted sources might terminate abruptly. A file in PKCS12 format can contain certificates