Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads
Summary
| CVE | CVE-2024-1394 |
|---|---|
| State | PUBLISHED |
| Assigner | redhat |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2024-03-21 13:00:08 UTC |
| Updated | 2026-08-12 20:17:30 UTC |
| Description | A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs. The memory leak happens in github.com/golang-fips/openssl/openssl/rsa.go#L113. The objects leaked are pkey and ctx. That function uses named return parameters to free pkey and ctx if there is an error initializing the context or setting the different properties. All return statements related to error cases follow the "return nil, nil, fail(...)" pattern, meaning that pkey and ctx will be nil inside the deferred function that should free them. |
Risk And Classification
Primary CVSS: v3.1 7.5 HIGH from [email protected]
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS: 0.015330000 probability, percentile 0.725380000 (date 2026-08-13)
Problem Types: CWE-401 | CWE-401 Missing Release of Memory after Effective Lifetime
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.1 | [email protected] | Secondary | 7.5 | HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| 3.1 | CNA | CVSS | 7.5 | HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
CVSS v3.1 Breakdown
Attack Vector
NetworkAttack Complexity
LowPrivileges Required
NoneUser Interaction
NoneScope
UnchangedConfidentiality
NoneIntegrity
NoneAvailability
HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Red Hat | Red Hat Ansible Automation Platform 2.4 For RHEL 8 | unaffected 0:1.4.5-1.el8ap * rpm | Not specified |
| CNA | Red Hat | Red Hat Ansible Automation Platform 2.4 For RHEL 9 | unaffected 0:1.4.5-1.el9ap * rpm | Not specified |
| CNA | Red Hat | Red Hat Developer Tools | unaffected 0:1.19.13-6.el7_9 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8 | unaffected 8090020240313170136.26eb71ac * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8 | unaffected 0:5.1.1-2.el8_9 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8 | unaffected 0:9.2.10-8.el8_9 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8 | unaffected 0:9.2.10-16.el8_10 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8 | unaffected 8100020240808093819.afee755d * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8 | unaffected 0:101-2.el8_10 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9 | unaffected 0:1.20.12-2.el9_3 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9 | unaffected 0:9.2.10-8.el9_3 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9 | unaffected 0:5.1.1-2.el9_3 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9 | unaffected 0:1.21.9-2.el9_4 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9 | unaffected 0:9.2.10-16.el9_4 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9 | unaffected 0:5.1.1-2.el9_4 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9 | unaffected 2:1.33.7-3.el9_4 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9 | unaffected 4:4.9.4-5.el9_4 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9 | unaffected 6:0.7.3-4.el9_4 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9 | unaffected 2:1.14.3-3.el9_4 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9 | unaffected 1:1.4.0-4.el9_4 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9 | unaffected 4:1.1.12-3.el9_4 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9 | unaffected 0:132-1.el9 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9.0 Update Services For SAP Solutions | unaffected 2:4.2.0-4.el9_0 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9.0 Update Services For SAP Solutions | unaffected 1:1.0.1-6.el9_0 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9.2 Extended Update Support | unaffected 0:1.19.13-7.el9_2 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9.2 Extended Update Support | unaffected 2:4.4.1-20.el9_2 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.12 | unaffected 1:1.23.4-5.2.rhaos4.12.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.12 | unaffected 0:0.16.0-2.2.rhaos4.12.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.12 | unaffected 1:1.4.0-1.1.rhaos4.12.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.12 | unaffected 0:1.25.3-5.2.rhaos4.12.git44a2cb2.el9 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.12 | unaffected 0:1.25.0-2.2.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.12 | unaffected 0:2.14.0-5.2.rhaos4.12.el9 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.12 | unaffected 0:4.12.0-202403251017.p0.gd4c9e3c.assembly.stream.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.12 | unaffected 3:4.2.0-7.2.rhaos4.12.el9 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.12 | unaffected 3:1.1.6-5.2.rhaos4.12.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.12 | unaffected 2:1.9.4-3.2.rhaos4.12.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.13 | unaffected 1:1.29.1-2.2.rhaos4.13.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.13 | unaffected 1:1.4.0-1.1.rhaos4.13.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.13 | unaffected 0:1.26.5-11.1.rhaos4.13.git919cc6e.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.13 | unaffected 0:1.26.0-4.1.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.13 | unaffected 0:2.15.0-7.1.rhaos4.13.el9 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.13 | unaffected 0:4.13.0-202404020737.p0.gd192e90.assembly.stream.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.13 | unaffected 3:4.4.1-5.2.rhaos4.13.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.13 | unaffected 4:1.1.12-1.1.rhaos4.13.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.13 | unaffected 2:1.11.2-2.2.rhaos4.13.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.14 | unaffected 0:0.19.0-1.3.rhaos4.14.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.14 | unaffected 1:1.4.0-1.2.rhaos4.14.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.14 | unaffected 0:1.27.4-6.1.rhaos4.14.gitd09e4c0.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.14 | unaffected 0:1.27.0-3.1.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.14 | unaffected 0:2.16.2-2.1.rhaos4.14.el9 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.14 | unaffected 0:4.14.0-202403261640.p0.gf7b14a9.assembly.stream.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.14 | unaffected 0:4.14.0-202403251040.p0.g607e2dd.assembly.stream.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.14 | unaffected 3:4.4.1-11.3.rhaos4.14.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.14 | unaffected 2:1.11.2-10.3.rhaos4.14.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.14 | unaffected 1:1.29.1-10.4.rhaos4.14.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.14 | unaffected 0:0.19.0-1.4.rhaos4.14.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.14 | unaffected 3:2.1.7-3.4.rhaos4.14.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.14 | unaffected 1:1.4.0-1.3.rhaos4.14.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.14 | unaffected 0:1.27.4-7.2.rhaos4.14.git082c52f.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.14 | unaffected 0:1.27.0-3.2.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.14 | unaffected 0:2.16.2-2.2.rhaos4.14.el9 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.14 | unaffected 0:4.14.0-202404160939.p0.g7bee54d.assembly.stream.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.14 | unaffected 0:4.14.0-202404151639.p0.gd2acdd5.assembly.stream.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.14 | unaffected 0:4.14.0-202404151639.p0.g81558cc.assembly.stream.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.14 | unaffected 0:4.14.0-202404151639.p0.gf7b14a9.assembly.stream.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.14 | unaffected 0:4.14.0-202404151639.p0.g8926a29.assembly.stream.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.14 | unaffected 0:4.14.0-202404151639.p0.g607e2dd.assembly.stream.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.14 | unaffected 3:4.4.1-11.4.rhaos4.14.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.14 | unaffected 4:1.1.12-1.2.rhaos4.14.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.14 | unaffected 2:1.11.2-10.4.rhaos4.14.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.14 | unaffected 0:4.14.19-202403280926.p0.gc1f8861.assembly.4.14.19.el9 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.14 | unaffected 414.92.202407300859-0 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.15 | unaffected 1:1.29.1-20.3.rhaos4.15.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.15 | unaffected 0:0.20.0-1.1.rhaos4.15.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.15 | unaffected 1:1.4.0-1.2.rhaos4.15.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.15 | unaffected 0:1.28.4-8.rhaos4.15.git24f50b9.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.15 | unaffected 0:1.28.0-3.1.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.15 | unaffected 0:2.16.2-2.1.rhaos4.15.el9 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.15 | unaffected 0:4.15.0-202403211240.p0.g62c4d45.assembly.stream.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.15 | unaffected 0:4.15.0-202403211549.p0.g2e3cca1.assembly.stream.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.15 | unaffected 3:4.4.1-21.1.rhaos4.15.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.15 | unaffected 4:1.1.12-1.1.rhaos4.15.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.15 | unaffected 2:1.11.2-21.2.rhaos4.15.el8 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.15 | unaffected 0:4.15.6-202403280951.p0.g94b1c2a.assembly.4.15.6.el9 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.15 | unaffected 415.92.202407191425-0 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenStack Platform 16.2 | unaffected 0:3.3.23-16.el8ost * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenStack Platform 17.1 For RHEL 8 | unaffected 0:0.2.1-3.el8ost * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenStack Platform 17.1 For RHEL 9 | unaffected 0:3.4.26-8.el9ost * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenStack Platform 17.1 For RHEL 9 | unaffected 0:0.2.1-3.el9ost * rpm | Not specified |
| CNA | Red Hat | RHODF-4.16-RHEL-9 | unaffected v4.16.0-137 * rpm | Not specified |
| CNA | Red Hat | RHODF-4.16-RHEL-9 | unaffected v4.16.0-38 * rpm | Not specified |
| CNA | Red Hat | NBDE Tang Server | Not specified | Not specified |
| CNA | Red Hat | OpenShift Developer Tools And Services | Not specified | Not specified |
| CNA | Red Hat | OpenShift Developer Tools And Services | Not specified | Not specified |
| CNA | Red Hat | OpenShift Pipelines | Not specified | Not specified |
| CNA | Red Hat | OpenShift Serverless | Not specified | Not specified |
| CNA | Red Hat | Red Hat Ansible Automation Platform 1.2 | Not specified | Not specified |
| CNA | Red Hat | Red Hat Ansible Automation Platform 1.2 | Not specified | Not specified |
| CNA | Red Hat | Red Hat Certification For Red Hat Enterprise Linux 8 | Not specified | Not specified |
| CNA | Red Hat | Red Hat Certification Program For Red Hat Enterprise Linux 9 | Not specified | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 7 | Not specified | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 7 | Not specified | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 7 | Not specified | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 7 | Not specified | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 7 | Not specified | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 7 | Not specified | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8 | Not specified | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8 | Not specified | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8 | Not specified | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8 | Not specified | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8 | Not specified | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8 | Not specified | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8 | Not specified | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8 | Not specified | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8 | Not specified | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8 | Not specified | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9 | Not specified | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9 | Not specified | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9 | Not specified | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9 | Not specified | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9 | Not specified | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9 | Not specified | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| CNA | Red Hat | Red Hat Openshift Container Storage 4 | Not specified | Not specified |
| CNA | Red Hat | Red Hat OpenShift Dev Spaces | Not specified | Not specified |
| CNA | Red Hat | Red Hat OpenShift GitOps | Not specified | Not specified |
| CNA | Red Hat | Red Hat OpenShift On AWS | Not specified | Not specified |
| CNA | Red Hat | Red Hat OpenShift Virtualization 4 | Not specified | Not specified |
| CNA | Red Hat | Red Hat OpenStack Platform 16.1 | Not specified | Not specified |
| CNA | Red Hat | Red Hat OpenStack Platform 16.1 | Not specified | Not specified |
| CNA | Red Hat | Red Hat OpenStack Platform 16.1 | Not specified | Not specified |
| CNA | Red Hat | Red Hat OpenStack Platform 16.2 | Not specified | Not specified |
| CNA | Red Hat | Red Hat OpenStack Platform 16.2 | Not specified | Not specified |
| CNA | Red Hat | Red Hat OpenStack Platform 16.2 | Not specified | Not specified |
| CNA | Red Hat | Red Hat OpenStack Platform 17.1 | Not specified | Not specified |
| CNA | Red Hat | Red Hat OpenStack Platform 17.1 | Not specified | Not specified |
| CNA | Red Hat | Red Hat OpenStack Platform 18.0 | Not specified | Not specified |
| CNA | Red Hat | Red Hat Service Interconnect 1 | Not specified | Not specified |
| CNA | Red Hat | Red Hat Service Interconnect 1 | Not specified | Not specified |
| CNA | Red Hat | Red Hat Service Interconnect 1 | Not specified | Not specified |
| CNA | Red Hat | Red Hat Software Collections | Not specified | Not specified |
| CNA | Red Hat | Red Hat Storage 3 | Not specified | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| access.redhat.com/errata/RHSA-2024:3352 | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| access.redhat.com/errata/RHSA-2024:1640 | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| access.redhat.com/errata/RHSA-2024:1646 | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| access.redhat.com/errata/RHSA-2024:1644 | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| access.redhat.com/errata/RHSA-2024:7262 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2024:1763 | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| access.redhat.com/errata/RHSA-2024:2729 | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| access.redhat.com/errata/RHSA-2025:7118 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2024:4761 | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| access.redhat.com/errata/RHSA-2024:4581 | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| access.redhat.com/errata/RHSA-2024:5634 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2024:2569 | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| access.redhat.com/errata/RHSA-2024:4672 | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| access.redhat.com/errata/RHSA-2024:1468 | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| access.redhat.com/errata/RHSA-2024:1462 | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| access.redhat.com/errata/RHSA-2024:4371 | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| access.redhat.com/errata/RHSA-2024:4379 | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| access.redhat.com/security/cve/CVE-2024-1394 | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| access.redhat.com/errata/RHSA-2024:1502 | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| access.redhat.com/errata/RHSA-2024:1566 | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| access.redhat.com/errata/RHSA-2024:2730 | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| access.redhat.com/errata/RHSA-2024:4699 | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| access.redhat.com/errata/RHSA-2024:4502 | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| access.redhat.com/errata/RHSA-2024:5258 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2024:4146 | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| access.redhat.com/errata/RHSA-2024:4960 | [email protected] | access.redhat.com | |
| vuln.go.dev/ID/GO-2024-2660.json | af854a3a-2127-422b-91ae-364da2661108 | vuln.go.dev | |
| github.com/golang-fips/openssl/security/advisories/GHSA-78hx-gp6g-7mj6 | af854a3a-2127-422b-91ae-364da2661108 | github.com | |
| access.redhat.com/errata/RHSA-2024:4591 | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| access.redhat.com/errata/RHSA-2024:1563 | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| access.redhat.com/errata/RHSA-2024:1561 | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| access.redhat.com/errata/RHSA-2024:1567 | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| access.redhat.com/errata/RHSA-2024:1472 | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| access.redhat.com/errata/RHSA-2024:1501 | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| access.redhat.com/errata/RHSA-2024:1897 | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| pkg.go.dev/vuln/GO-2024-2660 | af854a3a-2127-422b-91ae-364da2661108 | pkg.go.dev | |
| access.redhat.com/errata/RHSA-2024:2767 | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| access.redhat.com/errata/RHSA-2024:3265 | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| access.redhat.com/errata/RHSA-2024:4378 | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| github.com/golang-fips/openssl/commit/85d31d0d257ce842c8a1e63c4d230ae850... | af854a3a-2127-422b-91ae-364da2661108 | github.com | |
| bugzilla.redhat.com/show_bug.cgi | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.redhat.com | |
| access.redhat.com/errata/RHSA-2024:2562 | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| access.redhat.com/errata/RHSA-2024:2568 | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| github.com/microsoft/go-crypto-openssl/commit/104fe7f6912788d2ad44602f77... | af854a3a-2127-422b-91ae-364da2661108 | github.com | |
| access.redhat.com/errata/RHSA-2024:1574 | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| access.redhat.com/errata/RHSA-2024:4762 | af854a3a-2127-422b-91ae-364da2661108 | access.redhat.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
Discovery Credit
CNA: Red Hat would like to thank @qmuntal and @r3kumar for reporting this issue. (en)
Additional Advisory Data
| Source | Time | Event |
|---|---|---|
| CNA | 2024-02-06T00:00:00.000Z | Reported to Red Hat. |
| CNA | 2024-03-20T00:00:00.000Z | Made public. |
Workarounds
CNA: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Legacy QID Mappings
- 161432 Oracle Enterprise Linux Security Update for golang (ELSA-2024-1462)
- 161434 Oracle Enterprise Linux Security Update for go-toolset:ol8 (ELSA-2024-1472)
- 161438 Oracle Enterprise Linux Security Update for grafana (ELSA-2024-1501)
- 161441 Oracle Enterprise Linux Security Update for grafana-pcp (ELSA-2024-1502)
- 161459 Oracle Enterprise Linux Security Update for grafana-pcp (ELSA-2024-1644)
- 161462 Oracle Enterprise Linux Security Update for grafana (ELSA-2024-1646)
- 243105 Red Hat Update for golang (RHSA-2024:1462)
- 243107 Red Hat Update for go-toolset:rhel8 (RHSA-2024:1472)
- 243117 Red Hat Update for grafana (RHSA-2024:1501)
- 243123 Red Hat Update for grafana-pcp (RHSA-2024:1502)
- 243152 Red Hat Update for red hat build of microshift 4.15.6 (RHSA-2024:1561)
- 243153 Red Hat Update for grafana (RHSA-2024:1646)
- 243158 Red Hat OpenShift Container Platform 4.15 Security Update (RHSA-2024:1563)
- 243164 Red Hat Update for grafana-pcp (RHSA-2024:1644)
- 243169 Red Hat OpenShift Container Platform 4.12 Security Update (RHSA-2024:1574)
- 243170 Red Hat OpenShift Container Platform 4.14 Security Update (RHSA-2024:1567)
- 243172 Red Hat Update for red hat build of microshift 4.14.19 (RHSA-2024:1566)
- 770239 Red Hat OpenShift Container Platform 4.15 Security Update (RHSA-2024:1563)
- 770240 Red Hat OpenShift Container Platform 4.12 Security Update (RHSA-2024:1574)
- 770241 Red Hat OpenShift Container Platform 4.14 Security Update (RHSA-2024:1567)
- 941629 AlmaLinux Security Update for go-toolset:rhel8 (ALSA-2024:1472)
- 941630 AlmaLinux Security Update for golang (ALSA-2024:1462)
- 941634 AlmaLinux Security Update for grafana (ALSA-2024:1501)
- 941635 AlmaLinux Security Update for grafana-pcp (ALSA-2024:1502)
- 941642 AlmaLinux Security Update for grafana-pcp (ALSA-2024:1644)
- 941643 AlmaLinux Security Update for grafana (ALSA-2024:1646)
- 961139 Rocky Linux Security Update for go-toolset:rhel8 (RLSA-2024:1472)
- 961145 Rocky Linux Security Update for grafana-pcp (RLSA-2024:1644)
- 961146 Rocky Linux Security Update for grafana (RLSA-2024:1646)
- 997781 GO (Go) Security Update for github.com/golang-fips/go (GHSA-78hx-gp6g-7mj6)