Heap Buffer Overflow in Real Time Logic LLC's SharkSSL Product

CVE-2024-53379

What is CVE-2024-53379?

A heap buffer overflow vulnerability exists in the server-side handshake implementation of SharkSSL from Real Time Logic LLC. This flaw allows remote attackers to exploit the system by sending a specially crafted Client-Hello message, potentially leading to Denial-of-Service. The issue originates from a failure to properly handle certain inputs during the handshake process, creating a security risk for users relying on this SSL implementation.

References