Lucene search
+L

5 matches found

RedHat Linux
RedHat Linux
•added 2025/03/05 8:59 p.m.•22 views

golang-fips: Golang FIPS zeroed buffer

A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted...

6.5CVSS7AI score0.00298EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2024/10/01 9:31 p.m.•34 views

Golang FIPS OpenSSL has a Use of Uninitialized Variable vulnerability

A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted...

6.5CVSS6.8AI score0.00298EPSS
SaveExploits0References24Affected Software1
Cvelist
Cvelist
•added 2024/10/01 6:17 p.m.•75 views

CVE-2024-9355 Golang-fips: golang fips zeroed buffer

A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted...

6.5CVSS0.00298EPSS
SaveExploits0References20
Vulnrichment
Vulnrichment
•added 2024/10/01 6:17 p.m.•61 views

CVE-2024-9355 Golang-fips: golang fips zeroed buffer

A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted...

6.5CVSS6.9AI score0.00298EPSS
SaveExploits0References20
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/01 12:00 a.m.•1 views

CVE-2024-9355: Use of Uninitialized Variable

A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted...

6.5CVSS6.8AI score0.00298EPSS
SaveExploits0References2
Rows per page
Query Builder