CVE-2024-12401
2 advisories.
Go/github.com/cert-manager/cert-manager CVE-2024-12401: medium
cert-manager ha a potential slowdown / DoS when parsing specially crafted PEM inputs
Action: Upgrade github.com/cert-manager/cert-manager to 1.12.14 or later.
go get github.com/cert-manager/cert-manager@v1.12.14go get github.com/cert-manager/cert-manager@v1.15.4go get github.com/cert-manager/cert-manager@v1.16.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.12.14 | - |
| 1.13.0-alpha.0 | 1.15.4 | - |
| 1.16.0-alpha.0 | 1.16.2 | - |
Fixed versions
| 1.12.14 | 1.15.4 | 1.16.2 |
Sources
- osv: GHSA-r4pg-vg54-wxx4
- https://github.com/cert-manager/cert-manager/security/advisories/GHSA-r4pg-vg54-wxx4
- https://github.com/golang/go/issues/50116
- https://github.com/cert-manager/cert-manager/pull/7400
- https://github.com/cert-manager/cert-manager/pull/7401
- https://github.com/cert-manager/cert-manager/pull/7402
- https://github.com/cert-manager/cert-manager/pull/7403
- https://github.com/cert-manager/cert-manager/commit/3a4c9eb55e2e43570679840bbe3217869fbc8efc
- https://github.com/cert-manager/cert-manager/commit/f22f78c8c0a64d718e203b326bc844c488ad7850
- https://github.com/cert-manager/cert-manager
- https://go.dev/issue/50116
- https://pkg.go.dev/vuln/GO-2024-3282
CVE-2024-12401 · published · modified · JSON
Go/github.com/cert-manager/cert-manager CVE-2024-12401: unknown
Potential slowdown / DoS when parsing specially crafted PEM inputs in github.com/cert-manager/cert-manager
Action: Upgrade github.com/cert-manager/cert-manager to 1.12.14 or later.
go get github.com/cert-manager/cert-manager@v1.12.14go get github.com/cert-manager/cert-manager@v1.15.4go get github.com/cert-manager/cert-manager@v1.16.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.12.14 | - |
| 1.13.0-alpha.0 | 1.15.4 | - |
| 1.16.0-alpha.0 | 1.16.2 | - |
Fixed versions
| 1.12.14 | 1.15.4 | 1.16.2 |
Sources
- osv: GO-2024-3282
- https://github.com/cert-manager/cert-manager/security/advisories/GHSA-r4pg-vg54-wxx4
- https://github.com/cert-manager/cert-manager/commit/3a4c9eb55e2e43570679840bbe3217869fbc8efc
- https://github.com/cert-manager/cert-manager/commit/f22f78c8c0a64d718e203b326bc844c488ad7850
- https://github.com/cert-manager/cert-manager/pull/7400
- https://github.com/cert-manager/cert-manager/pull/7401
- https://github.com/cert-manager/cert-manager/pull/7402
- https://github.com/cert-manager/cert-manager/pull/7403
- https://go.dev/issue/50116
CVE-2024-12401 · published · modified · JSON