GHSA-78hx-gp6g-7mj6

ghsaUSosv

Memory leaks in code encrypting and verifying RSA payloads

view advisory published 2024-03-20Licence: CC-BY-4.0

Using crafted public RSA keys which are not compliant with SP 800-56B can cause a small memory leak when encrypting and verifying payloads. An attacker can leverage this flaw to gradually erode available memory to the point where the host crashes for lack of resources. Upon restart the attacker would have to begin again, but nevertheless there is the potential to deny service.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2024-1394US——
A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs​. The memory…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan