CVE-2024-5535 - Openssl 1.0.2zj Vunerability

[AkhilSreek]

Hey ,

Just heard about CVE-2024-5535 on splunkforwarder agent 9.0.9 for Openssl 1.0.2zj , Is this a real one ? Do we need upgrade the agent now.

Thanks in advance.

[marnall]

Version 9.0.9 of the Splunk Forwarder does contain Openssl 1.0.2zj. Is this version of Openssl vulnerable to CVE-2024-5535? I could not find a direct confirmation.

Latest third-party security update involving openssl: https://advisory.splunk.com/advisories/SVD-2024-0304

As the latest advisory does not include openssl (https://advisory.splunk.com/advisories/SVD-2024-0718) , it may be best to wait for the next patch.