CVE-2024-5535: `SSL_select_next_proto` buffer overreadÂ
CVE-2024-5535 is a bug in OpenSSL that has been present since 2011, allowing the leakage of up to 255 bytes of the client's heap data to the server when theSSL_select_next_protofunction is called with a client buffer that is not a valid list of protocols. This bug affects OpenSSL, BoringSSL, Node.js.. read more Â











