AZL-56031

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-56031.json

JSON Data

https://api.test.osv.dev/v1/vulns/AZL-56031

Upstream

CVE-2024-45341

Published

2025-01-28T02:15:29Z

Modified

2026-04-01T05:18:47.810673Z

Summary

CVE-2024-45341 affecting package msft-golang for versions less than 1.23.3-2

Details

A certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate chain. Certificates containing URIs are not permitted in the web PKI, so this only affects users of private PKIs which make use of URIs.

References

https://nvd.nist.gov/vuln/detail/CVE-2024-45341

Affected packages

Azure Linux:2 / msft-golang

Package

Name: msft-golang
Purl: pkg:rpm/azure-linux/msft-golang

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.23.3-2

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-56031.json"