Go/github.com/microsoft/go-crypto-openssl/openssl CVE-2024-1394: high 7.5, EPSS 1.53%
Memory leaks in code encrypting and verifying RSA payloads
Action: Upgrade github.com/microsoft/go-crypto-openssl/openssl to 0.2.9 or later.
go get github.com/microsoft/go-crypto-openssl/openssl@v0.2.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.2.9 | - |
Fixed versions
| 0.2.9 |
Sources
- osv: GHSA-78hx-gp6g-7mj6#Go/github.com/microsoft/go-crypto-openssl/openssl
- https://github.com/golang-fips/openssl/security/advisories/GHSA-78hx-gp6g-7mj6
- https://nvd.nist.gov/vuln/detail/CVE-2024-1394
- https://github.com/microsoft/go-crypto-openssl/commit/104fe7f6912788d2ad44602f77a0a0a62f1f259f
- https://github.com/golang-fips/openssl/commit/85d31d0d257ce842c8a1e63c4d230ae850348136
- https://access.redhat.com/errata/RHSA-2024:1462
- https://access.redhat.com/errata/RHSA-2024:4378
- https://access.redhat.com/errata/RHSA-2024:4379
- https://access.redhat.com/errata/RHSA-2024:4502
- https://access.redhat.com/errata/RHSA-2024:4581
- https://access.redhat.com/errata/RHSA-2024:4591
- https://access.redhat.com/errata/RHSA-2024:4672
- https://access.redhat.com/errata/RHSA-2024:4699
- https://access.redhat.com/errata/RHSA-2024:4761
- https://access.redhat.com/errata/RHSA-2024:4762
- https://access.redhat.com/errata/RHSA-2024:4960
- https://access.redhat.com/errata/RHSA-2024:5258
- https://access.redhat.com/errata/RHSA-2024:5634
- https://access.redhat.com/errata/RHSA-2024:7262
- https://access.redhat.com/security/cve/CVE-2024-1394
- https://bugzilla.redhat.com/show_bug.cgi?id=2262921
- https://github.com/golang-fips/openssl
- https://github.com/golang-fips/openssl/releases/tag/v2.0.1
- https://github.com/microsoft/go-crypto-openssl/releases/tag/v0.2.9
- https://pkg.go.dev/vuln/GO-2024-2660
- https://vuln.go.dev/ID/GO-2024-2660.json
- https://access.redhat.com/errata/RHSA-2024:1468
- https://access.redhat.com/errata/RHSA-2024:1472
- https://access.redhat.com/errata/RHSA-2024:1501
- https://access.redhat.com/errata/RHSA-2024:1502
- https://access.redhat.com/errata/RHSA-2024:1561
- https://access.redhat.com/errata/RHSA-2024:1563
- https://access.redhat.com/errata/RHSA-2024:1566
- https://access.redhat.com/errata/RHSA-2024:1567
- https://access.redhat.com/errata/RHSA-2024:1574
- https://access.redhat.com/errata/RHSA-2024:1640
- https://access.redhat.com/errata/RHSA-2024:1644
- https://access.redhat.com/errata/RHSA-2024:1646
- https://access.redhat.com/errata/RHSA-2024:1763
- https://access.redhat.com/errata/RHSA-2024:1897
- https://access.redhat.com/errata/RHSA-2024:2562
- https://access.redhat.com/errata/RHSA-2024:2568
- https://access.redhat.com/errata/RHSA-2024:2569
- https://access.redhat.com/errata/RHSA-2024:2729
- https://access.redhat.com/errata/RHSA-2024:2730
- https://access.redhat.com/errata/RHSA-2024:2767
- https://access.redhat.com/errata/RHSA-2024:3265
- https://access.redhat.com/errata/RHSA-2024:3352
- https://access.redhat.com/errata/RHSA-2024:4146
- https://access.redhat.com/errata/RHSA-2024:4371
CVE-2024-1394 · published · modified · JSON