CVE-2024-29172 Details
Description
Dell BSAFE SSL-J, versions prior to 6.6 and versions 7.0 through 7.2, contains a deadlock vulnerability. A remote attacker could potentially exploit this vulnerability, leading to a Denial of Service.
A deadlock vulnerability has been identified in Dell BSAFE SSL-J, affecting versions prior to 6.6 and versions 7.0 through 7.2. This vulnerability could be exploited by a remote attacker, leading to a denial-of-service condition.
Users can upgrade to Dell BSAFE SSL-J version 6.6 or version 7.2.1. Instructions for downloading these versions are available on the Dell BSAFE product download request page.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Feb 12, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.dell.com/support/kbdoc/en-us/000226620/dsa-2024-221-security-update-for-dell-bsafe-ssl-j-multiple-vulnerabilities | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-667 | Improper Locking | [email protected] |
| CWE-833 | Deadlock | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| dell bsafe ssl-j | < 6.6 >= 7.0, < 7.2.1 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Mar 19, 2025 | Initial Analysis | [email protected] |
| Feb 13, 2025 | CVE Modified | [email protected] |
| Feb 12, 2025 | New CVE Received | [email protected] |