CVE-2024-6119

CVE-2024-6119 describes a denial-of-service vulnerability affecting applications that perform certificate name checks, specifically impacting products like NetApp and OpenSSL. When comparing an expected name with an 'otherName' subject alternative name in an X.509 certificate, applications may attempt to read an invalid memory address, leading to abnormal termination. This vulnerability has a CVSS score of 7.5 (HIGH), indicating a network-based attack with low complexity and no user interaction required, resulting in high availability impact. While basic certificate chain validation is unaffected, the denial of service occurs when an application specifies an expected DNS name, email address, or IP address. Currently, there is no evidence of active exploitation, and no exploit code is available on platforms like Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are minimal, suggesting limited public awareness or active exploitation at this time.