AxxonSoft Axxon One OpenSSL Memory Buffer Vulnerability Leading to Crashes

A vulnerability exists in the OpenSSL-based session module of AxxonSoft Axxon One versions through 2.0.6 on Windows. It stems from improper memory management, allowing remote attackers under high load to exploit memory reallocation errors while processing expired session keys. This could result in application crashes or unpredictable behavior.

Impact

Exploitation of this vulnerability can cause application crashes or erratic behavior.

Remediation

Users are advised to upgrade to Axxon One version 2.0.8 or later, and to recompile and deploy the application using OpenSSL version 3.0.13 or later.