BIT-golang-2024-24783

See a problem?
Import Source
https://github.com/bitnami/vulndb/tree/main/data/golang/BIT-golang-2024-24783.json
JSON Data
https://api.osv.dev/v1/vulns/BIT-golang-2024-24783
Aliases
Published
2024-03-12T08:24:32.786Z
Modified
2024-09-11T06:13:15.186035Z
Summary
[none]
Details

Verifying a certificate chain which contains a certificate with an unknown public key algorithm will cause Certificate.Verify to panic. This affects all crypto/tls clients, and servers that set Config.ClientAuth to VerifyClientCertIfGiven or RequireAndVerifyClientCert. The default behavior is for TLS servers to not verify client certificates.

References

Affected packages

Bitnami / golang

Package

Name
golang
Purl
pkg:bitnami/golang

Affected ranges

Type
SEMVER
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.21.8
Introduced
1.22.0-0
Fixed
1.22.1