Lucene search
K

4 matches found

RedHat Linux
RedHat Linux
added 2025/03/05 8:59 p.m.4 views

golang-fips: Golang FIPS zeroed buffer

A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted...

6.5CVSS5.8AI score0.0007EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2024/10/01 9:31 p.m.18 views

Golang FIPS OpenSSL has a Use of Uninitialized Variable vulnerability

A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted...

6.5CVSS6.8AI score0.0007EPSS
Exploits0References18Affected Software1
Cvelist
Cvelist
added 2024/10/01 6:17 p.m.20 views

CVE-2024-9355 Golang-fips: golang fips zeroed buffer

A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted...

6.5CVSS0.0007EPSS
Exploits0References14
Vulnrichment
Vulnrichment
added 2024/10/01 6:17 p.m.19 views

CVE-2024-9355 Golang-fips: golang fips zeroed buffer

A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted...

6.5CVSS6.9AI score0.0007EPSS
Exploits0References14
Rows per page
Query Builder