Vulnerability Report: GO-2024-2660

  • CVE-2024-1394, GHSA-78hx-gp6g-7mj6
  • Affects: github.com/golang-fips/openssl/v2, github.com/microsoft/go-crypto-openssl
  • Published: Mar 27, 2024
  • Modified: May 20, 2024

Using crafted public RSA keys can cause a small memory leak when encrypting and verifying payloads. This can be gradually leveraged into a denial of service attack.

Affected Packages

Aliases

References

Credits

  • @qmuntal and @r3kumar

Feedback

See anything missing or incorrect? Suggest an edit to this report.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.
OSZAR »