Github.Com Golang-Fips Openssl vulnerabilities

1 known vulnerability affecting github.com/golang-fips_openssl.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2024-9355HIGH≥ 0, ≤ 2.0.32024-10-01

CVE-2024-9355 [HIGH] CWE-457 Golang FIPS OpenSSL has a Use of Uninitialized Variable vulnerability Golang FIPS OpenSSL has a Use of Uninitialized Variable vulnerability A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted computed hmac sum to an untruste