CVE-2024-24783

Source
https://cve.org/CVERecord?id=CVE-2024-24783
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-24783.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-24783
Aliases
Downstream
ALPINE (1)
ALSA (12)
AZL (4)
BELL (1)
CGA (724)
CLEANSTART (2)
DEBIAN (1)
MINI (3)
OESA (4)
openSUSE (2)
RHSA (17)
RLSA (4)
SUSE (8)
UBUNTU (1)
Related
Withdrawn
2026-01-27T04:20:09Z
Published
2024-03-05T23:15:07Z
Modified
2026-07-17T21:02:46Z
Summary
[none]
Details

Verifying a certificate chain which contains a certificate with an unknown public key algorithm will cause Certificate.Verify to panic. This affects all crypto/tls clients, and servers that set Config.ClientAuth to VerifyClientCertIfGiven or RequireAndVerifyClientCert. The default behavior is for TLS servers to not verify client certificates.

References

Affected packages