OpenSSL SSL_CTX out-of-bounds write (CVE-2024-9143)

Summary

A memory corruption flaw exists in the session ticket key callback.

Vulnerability ID	Vulnerability Overview
CVE-2024-9143	Using SSL_CTX_set_tlsext_ticket_key_cb with a maliciously manipulated ticket key can result in an out-of-bounds write, destabilizing or crashing the process.

Affected Supported TeraStations

TS5010/3020/3010
Fixed in firmware version 6.12
 

Back to Security Notices

Date	Description
09/10/2026	Initial release

Back to Security Notices