CVE-2024-24783

2024-03-0523:15:07

Alpine Linux Development Team

security.alpinelinux.org

cve-2024-24783

certificate validation

crypto/tls clients

servers

client authentication

tls behavior

unix

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.4%

JSON

Verifying a certificate chain which contains a certificate with an unknown public key algorithm will cause Certificate.Verify to panic. This affects all crypto/tls clients, and servers that set Config.ClientAuth to VerifyClientCertIfGiven or RequireAndVerifyClientCert. The default behavior is for TLS servers to not verify client certificates.

OSVersionArchitecturePackageVersionFilename
Alpineedge-communitynoarchgo< 1.22.1-r0UNKNOWN
Alpine3.19-communitynoarchgo< 1.21.8-r0UNKNOWN
Alpine3.20-communitynoarchgo< 1.22.1-r0UNKNOWN