PT-2024-10083 · Intel+1 · Intel Qat Engine For Openssl+1

Alicja Kario · Published 2024-11-13 · Updated 2025-11-11 · CVE-2024-33617

Positive Technologies (AI Summary)

CVSS v4.0

8.2

High

Base vector

AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Intel QAT Engine for OpenSSL versions prior to v1.6.1

Description The issue is related to insufficient control flow management in the Intel QAT Engine for OpenSSL software, which may allow information disclosure via network access. This could enable a remote attacker to gain unauthorized access to protected information.

Recommendations For versions prior to v1.6.1, update to version v1.6.1 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-691

Related Identifiers

BDU:2025-00256

CVE-2024-33617

SUSE-SU-2025:3942-1

SUSE-SU-2025:3943-1

SUSE-SU-2025:4053-1

Affected Products

Intel Qat Engine For Openssl

Suse

References · 17

• https://nvd.nist.gov/vuln/detail/CVE-2024-33617 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:3942-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-00256 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:3943-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4053-1 · Vendor Advisory
• https://suse.com/support/update/announcement/2025/suse-su-20253942-1 · Note
• https://suse.com/support/update/announcement/2025/suse-su-20254053-1 · Note
• https://suse.com/security/cve/CVE-2024-33617 · Note
• https://suse.com/support/update/announcement/2025/suse-su-20253943-1 · Note
• https://bugzilla.suse.com/1233366 · Note
• https://suse.com/security/cve/CVE-2024-28885 · Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01177.html · Note
• https://twitter.com/VulmonFeeds/status/1856979714230882438 · Twitter Post
• https://twitter.com/CVEnew/status/1856808184662344007 · Twitter Post
• https://bugzilla.suse.com/1233365 · Note