RFC7250 handshakes with unauthenticated servers don't abort as expected
Priority LOW 38CWE-392Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · None
- Fix status
- Partial Red Hat: 9 fixed, 1 without a fix
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA, GitHub and Red Hat.
Summary
Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a server may fail to notice that the server was not authenticated, because handshakes don't abort as expected when the SSL_VERIFY_PEER verification mode is set. Impact summary: TLS and DTLS connections using raw public keys may be vulnerable to man-in-middle attacks when server authentication failure is not detected by clients. RPKs are disabled by default in both TLS clients and TLS servers. The issue only arises when TLS clients explicitly enable RPK use by the server, and the server, likewise, enables sending of an RPK instead of an X.509 certificate chain. The affected clients are those that then rely on the handshake to fail when the server's RPK fails to match one of the expected public keys, by setting the verification mode to SSL_VERIFY_PEER. Clients that enable server-side raw public keys can still find out that raw public key verification failed by calling SSL_get_verify_result(), and those that do, and take appropriate action, are not affected. This issue was introduced in the initial implementation of RPK support in OpenSSL 3.2. The FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01857 79th percentileScored 2026-11-07
Fix Partial OpenSSL (OpenSSL): 3.4.1, 3.3.3, 3.2.4cryptography (PyPI): 44.0.1Red Hat: 7 advisoriesRed Hat: 9 fixed, 1 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| OpenSSL | OpenSSL | 3.4.0 to before 3.4.1; 3.3.0 to before 3.3.3; 3.2.0 to before 3.2.4 | 3.4.1, 3.3.3, 3.2.4 | Patch available | CNA |
| — | cryptography (PyPI) | 42.0.0 to before 44.0.1 | 44.0.1 | Patch available | GHSA-79v4-65xg-pq4g |
- OpenSSL VendorOpenSSL Affected 3.4.0 to before 3.4.1; 3.3.0 to before 3.3.3; 3.2.0 to before 3.2.4 Fixed in 3.4.1, 3.3.3, 3.2.4 Patch available CNA
- cryptography (PyPI) Vendor— Affected 42.0.0 to before 44.0.1 Fixed in 44.0.1 Patch available GHSA-79v4-65xg-pq4g
CPE configurations NVD · 21
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:* | 3.2.0 to before 3.2.4; 3.3.0 to before 3.3.3; 3.4.0 to before 3.4.1 | Vulnerable | OpenSSL |
| cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:hyper-v:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:o:netapp:brocade_fabric_operating_system:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
- cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:* Versions 3.2.0 to before 3.2.4; 3.3.0 to before 3.3.3; 3.4.0 to before 3.4.1 Vulnerable ·OpenSSL
- cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:hyper-v:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:o:netapp:brocade_fabric_operating_system:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
Show 11 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:netapp:h610c_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:h610c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:netapp:h610s_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:h610s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:netapp:h615c_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:h615c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:netapp:bootstrap_os:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
- cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:netapp:h610c_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:h610c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:netapp:h610s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:h610s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:netapp:h615c_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:h615c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:netapp:bootstrap_os:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
Remediation
- Fix · CNA OpenSSL (OpenSSL) Fixed in 3.4.1, 3.3.3, 3.2.4
- Fix · GHSA-79v4-65xg-pq4g cryptography (PyPI) Fixed in 44.0.1 Advisory →
Red Hat 7 advisories
- RHSA-2025:9895 Released 2025-06-30 · Red Hat rating ImportantRed Hat Service Interconnect security update
- 9Base-Service-Interconnect-1.4 service-interconnect/skupper-config-sync-rhel9, service-interconnect/skupper-flow-collector-rhel9, service-interconnect/skupper-operator-bundle +3
- RHSA-2025:4005 Released 2025-04-17 · Red Hat rating ImportantUpdated service-interconnect rhel9 container images for 1.8
- Red Hat Service Interconnect 1 service-interconnect/skupper-config-sync-rhel9, service-interconnect/skupper-controller-podman-container-rhel9, service-interconnect/skupper-controller-podman-rhel9 +5
- RHSA-2025:2754 Released 2025-03-13 · Red Hat rating ImportantRed Hat OpenShift Builds 1.3
- Builds for Red Hat OpenShift 1.3.2 registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9, registry.redhat.io/openshift-builds/openshift-builds-shared-resource-webhook-rhel9, registry.redhat.io/openshift-builds/openshift-builds-waiters-rhel9
Show 4 more Red Hat advisories
- RHSA-2025:1985 Released 2025-03-05 · Red Hat rating ModerateLogging for Red Hat OpenShift - 5.9.12
- RHOL 5.9 for RHEL 9 openshift-logging/cluster-logging-operator-bundle, openshift-logging/cluster-logging-rhel9-operator, openshift-logging/eventrouter-rhel9 +9
- RHSA-2025:1925 Released 2025-02-27 · Red Hat rating ImportantUpdated service-interconnect rhel9 container images for 1.5
- Red Hat Service Interconnect 1 service-interconnect/skupper-config-sync-rhel9, service-interconnect/skupper-controller-podman-container-rhel9, service-interconnect/skupper-controller-podman-rhel9 +5
- RHSA-2025:1487 Released 2025-02-13 · Red Hat rating Importantupdated discovery container images
- Discovery 1 for RHEL 9 discovery/discovery-server-rhel9, discovery/discovery-ui-rhel9
- RHSA-2025:1330 Released 2025-02-11 · Red Hat rating Importantopenssl security update
- Red Hat Enterprise Linux AppStream (v. 9) openssl-devel-1:3.2.2-6.el9_5.1, openssl-perl-1:3.2.2-6.el9_5.1
- Red Hat Enterprise Linux BaseOS (v. 9) openssl-1:3.2.2-6.el9_5.1, openssl-libs-1:3.2.2-6.el9_5.1
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 10 | Affected | No fix yet |
| 9Base-Service-Interconnect-1.4 | Fixed | RHSA-2025:9895 |
| Builds for Red Hat OpenShift 1.3.2 | Fixed | RHSA-2025:2754 |
| Discovery 1 for RHEL 9 | Fixed | RHSA-2025:1487 |
| RHOL 5.9 for RHEL 9 | Fixed | RHSA-2025:1985 |
| Red Hat Enterprise Linux AppStream (v. 10) | Fixed | — |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2025:1330 |
| Red Hat Enterprise Linux BaseOS (v. 10) | Fixed | — |
| Red Hat Enterprise Linux BaseOS (v. 9) | Fixed | RHSA-2025:1330 |
| Red Hat Service Interconnect 1 | Fixed | RHSA-2025:1925, RHSA-2025:4005 |
Not affected: 9 products
- Builds for Red Hat OpenShift 1.3.2
- Red Hat 3scale API Management Platform 2
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Red Hat JBoss Core Services
- Red Hat OpenShift Container Platform 4
Timeline
- 2026-10-02 Threatist record created from CVE-2024-12797
- 2026-10-03 Alias added: GHSA-79v4-65xg-pq4g
- 2026-11-06 CVSS score changed · CISA ADP
- 2026-11-06 CISA SSVC decision points changed
References
Advisory 5
More Openssl vulnerabilities
- TI-2022-01915 The c_rehash script allows command injection CVSS 3.1CRITICAL 9.8
- TI-2021-02645 SM2 Decryption Buffer Overflow CVSS 3.1CRITICAL 9.8
- TI-2009-03392 The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft… CVSS 3.1CRITICAL 9.8
- TI-2022-01176 The c_rehash script allows command injection CVSS 3.1CRITICAL 9.8
- TI-2014-00154 The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly… KEVCVSS 3.1HIGH 7.5
- TI-2025-14107 Stack buffer overflow in CMS (Auth)EnvelopedData parsing CVSS 3.1HIGH 8.8
Sources
- CVE-2024-12797 · CVE Program
- CVE-2024-12797 · NVD
- FIRST EPSS
- GHSA-79v4-65xg-pq4g · GitHub Advisory Database · CC BY 4.0
- CVE-2024-12797 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences