CVE-2024-45341: falha de média gravidade em Go standard library crypto/x509
Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.1epss 0.6%
A certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate chain. Certificates containing URIs are not permitted in the web PKI, so this only affects users of private PKIs which make use of URIs.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Produtos afetados
Go standard library · crypto/x509CVEs relacionadas — Go standard library crypto/x509
No mesmo produto, das mais perigosas para as menos.
CVE-2024-24783MEDIUMVerify panics on certificates with an unknown public key algorithm in crypto/x509EPSS 0.7%CVE-2026-27137HIGHIncorrect enforcement of email constraints in crypto/x509EPSS 0.7%CVE-2026-32280HIGHUnexpected work during chain building in crypto/x509EPSS 0.6%CVE-2025-22865HIGHParsePKCS1PrivateKey panic with partial keys in crypto/x509EPSS 0.6%CVE-2026-27145MEDIUMInefficient candidate hostname parsing in crypto/x509EPSS 0.6%CVE-2025-61729HIGHExcessive resource consumption when printing error string for host certificate validation in crypto/x509EPSS 0.5%