OpenSSL SSL_free memory leak (CVE-2024-13176)

Summary

A failure to free memory in SSL contexts causes resource exhaustion.

Vulnerability ID	Vulnerability Overview
CVE-2024-13176	An edge case in OpenSSL connection cleanup routines causes SSL_free to leak memory, potentially resulting in a denial of service under heavy connection loads.

Affected Supported TeraStations

TS5010/3020/3010
Fixed in firmware version 6.12
 

Back to Security Notices

Date	Description
09/10/2026	Initial release

Back to Security Notices