Hey ,
Just heard about CVE-2024-5535 on splunkforwarder agent 9.0.9 for Openssl 1.0.2zj , Is this a real one ? Do we need upgrade the agent now.
Thanks in advance.
Version 9.0.9 of the Splunk Forwarder does contain Openssl 1.0.2zj. Is this version of Openssl vulnerable to CVE-2024-5535? I could not find a direct confirmation.
Latest third-party security update involving openssl: https://advisory.splunk.com/advisories/SVD-2024-0304
As the latest advisory does not include openssl (https://advisory.splunk.com/advisories/SVD-2024-0718) , it may be best to wait for the next patch.
