github.com/golang-fips/openssl

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Medium 6.5

CVE-2024-9355

Golang-fips: golang fips zeroed buffer

A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Azure Linux Go

Oct 1, 2024