CVE-2024-29172

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Dell BSAFE SSL-J, versions prior to 6.6 and versions 7.0 through 7.2, contains a deadlock vulnerability. A remote attacker could potentially exploit this vulnerability, leading to a Denial of Service.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-833CWE-667

Affected software

No affected versions have been published.

Timeline

Published
Feb 12, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-291734.9Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain a Server-Side Request Forgery (SSRF) vulnerabCVE-2024-291744.4Dell Data Domain, versions prior to 7.13.0.0, LTS 7.7.5.30, LTS 7.10.1.20 contain an SQL Injection vulnerability. A local low privileged attCVE-2024-291755.9Dell PowerProtect Data Domain, versions prior to 7.13.0.0, LTS 7.7.5.40, LTS 7.10.1.30 contain an weak cryptographic algorithm vulnerabilityCVE-2024-291768.8Dell PowerProtect DD, version(s) 8.0, 7.13.1.0, 7.10.1.30, 7.7.5.40, contain(s) an Out-of-bounds Write vulnerability. A low privileged attacCVE-2024-291772.7Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain a disclosure of temporary sensitive informatiCVE-2024-291788.8On versions before 2.1.4, a user could log in and perform a template injection attack resulting in Remote Code Execution on the server, The CVE-2024-291794.8phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. An attacker with admin privileges canCVE-2024-29183.6Improper input validation in PAM JIT elevation feature in Devolutions Server 2024.1.6 and earlier allows an attacker with access to the PAM CVE-2024-291807.5Prior to versions 7.1.0, 6.1.2, and 5.3.4, the webpack-dev-middleware development middleware for devpack does not validate the supplied URL CVE-2024-291813.5Strapi is an open-source content management system. Prior to version 4.19.1, a super admin can create a collection where an item in the collCVE-2024-291826.1Collabora Online is a collaborative online office suite based on LibreOffice. A stored cross-site scripting vulnerability was found in CollaCVE-2024-291836.1OpenRASP is a RASP solution that directly integrates its protection engine into the application server by instrumentation. There exists a re
CVE-2024-29172: High severity, CVSS 7.5 | Vulnix