CVE-2024-5535 | OpenSSL up to 3.3.1 Client Protocol SSL_select_next_proto client/client_len memory corruption (Nessus ID 208438 / WID-SEC-2024-1469)

A vulnerability identified as critical has been detected in OpenSSL up to 3.3.1. This impacts the function SSL_select_next_proto of the component Client Protocol Handler. Performing a manipulation of the argument client/client_len results in memory corruption. This vulnerability is reported as CVE-2024-5535. The attack is possible to be carried out remotely. No exploit exists. You should upgrade the affected component.