{"metadata": {"vulnerability": "rhsa-2024:5258", "count": 92, "kinds": {"milestone": 19, "sighting": 4, "kev": 0, "other": 69}}, "data": [{"timestamp": "2023-10-06T17:06:26.221Z", "date_only": false, "value": "2023-10-06T17:06:26.221Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2023-45290", "record": "CVE-2023-45290", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-01-30T16:05:14.757Z", "date_only": false, "value": "2024-01-30T16:05:14.757Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2024-24783", "record": "CVE-2024-24783", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-01-30T16:05:14.757Z", "date_only": false, "value": "2024-01-30T16:05:14.757Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2024-24784", "record": "CVE-2024-24784", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-01-30T16:05:14.758Z", "date_only": false, "value": "2024-01-30T16:05:14.758Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2024-24789", "record": "CVE-2024-24789", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-02-06T00:00:00Z", "date_only": false, "value": "2024-02-06T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse", "record": "rhsa-2024:5258", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2024-02-06T00:00:00Z", "date_only": false, "value": "2024-02-06T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 \u00b7 CVE-2024-1394 / redhat", "record": "CVE-2024-1394", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2024-02-09T06:02:35.056Z", "date_only": false, "value": "2024-02-09T06:02:35.056Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2024-1394", "record": "CVE-2024-1394", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-03-05T00:00:00Z", "date_only": false, "value": "2024-03-05T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse", "record": "rhsa-2024:5258", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2024-03-05T00:00:00Z", "date_only": false, "value": "2024-03-05T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse", "record": "rhsa-2024:5258", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-03-05T22:22:26.647Z", "date_only": false, "value": "2024-03-05T22:22:26.647Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2024-24783", "record": "CVE-2024-24783", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-03-05T22:22:28.703Z", "date_only": false, "value": "2024-03-05T22:22:28.703Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2023-45290", "record": "CVE-2023-45290", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-03-05T22:22:32.186Z", "date_only": false, "value": "2024-03-05T22:22:32.186Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2024-24784", "record": "CVE-2024-24784", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-03-06T15:04:15.773Z", "date_only": false, "value": "2024-03-06T15:04:15.773941Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2023-45290 / CISA-ADP", "record": "CVE-2023-45290", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2024-03-06T18:26:26.163Z", "date_only": false, "value": "2024-03-06T18:26:26.163411Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2024-24783 / CISA-ADP", "record": "CVE-2024-24783", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2024-03-20T00:00:00Z", "date_only": false, "value": "2024-03-20T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 \u00b7 CVE-2024-1394 / redhat", "record": "CVE-2024-1394", "field": "containers.cna.datePublic"}, {"timestamp": "2024-03-20T00:00:00Z", "date_only": false, "value": "2024-03-20T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse", "record": "rhsa-2024:5258", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2024-03-20T00:00:00Z", "date_only": false, "value": "2024-03-20T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 \u00b7 CVE-2024-1394 / redhat", "record": "CVE-2024-1394", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2024-03-21T12:16:38.790Z", "date_only": false, "value": "2024-03-21T12:16:38.790Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2024-1394", "record": "CVE-2024-1394", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-03-21T18:21:05.099Z", "date_only": false, "value": "2024-03-21T18:21:05.099385Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2024-1394 / CISA-ADP", "record": "CVE-2024-1394", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-04-12T00:00:00Z", "date_only": false, "value": "2024-04-12T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse", "record": "rhsa-2024:5258", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2024-04-12T00:00:00Z", "date_only": false, "value": "2024-04-12T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 \u00b7 CVE-2024-3727 / redhat", "record": "CVE-2024-3727", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2024-04-12T17:56:37.261Z", "date_only": false, "value": "2024-04-12T17:56:37.261Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2024-3727", "record": "CVE-2024-3727", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-05-01T17:09:41.105Z", "date_only": false, "value": "2024-05-01T17:09:41.105Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-24784 / Go", "record": "CVE-2024-24784", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-05-01T17:09:42.854Z", "date_only": false, "value": "2024-05-01T17:09:42.854Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-24783 / Go", "record": "CVE-2024-24783", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-05-01T17:09:46.260Z", "date_only": false, "value": "2024-05-01T17:09:46.260Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-45290 / Go", "record": "CVE-2023-45290", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-05-09T00:00:00Z", "date_only": false, "value": "2024-05-09T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 \u00b7 CVE-2024-3727 / redhat", "record": "CVE-2024-3727", "field": "containers.cna.datePublic"}, {"timestamp": "2024-05-09T00:00:00Z", "date_only": false, "value": "2024-05-09T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse", "record": "rhsa-2024:5258", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2024-05-09T00:00:00Z", "date_only": false, "value": "2024-05-09T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 \u00b7 CVE-2024-3727 / redhat", "record": "CVE-2024-3727", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2024-05-09T14:57:21.327Z", "date_only": false, "value": "2024-05-09T14:57:21.327Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2024-3727", "record": "CVE-2024-3727", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-05-13T17:59:41.318Z", "date_only": false, "value": "2024-05-13T17:59:41.318223Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2024-3727 / CISA-ADP", "record": "CVE-2024-3727", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-06-04T00:00:00Z", "date_only": false, "value": "2024-06-04T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse", "record": "rhsa-2024:5258", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2024-06-04T17:33:13.046Z", "date_only": false, "value": "2024-06-04T17:33:13.046Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-3727 / CISA-ADP", "record": "CVE-2024-3727", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-06-05T13:50:55.732Z", "date_only": false, "value": "2024-06-05T13:50:55.732Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-1394 / CISA-ADP", "record": "CVE-2024-1394", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-06-05T15:13:51.938Z", "date_only": false, "value": "2024-06-05T15:13:51.938Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2024-24789", "record": "CVE-2024-24789", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-06-05T20:10:46.496Z", "date_only": false, "value": "2024-06-05T20:10:46.496Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2024-37298", "record": "CVE-2024-37298", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-06-06T15:26:12.977Z", "date_only": false, "value": "2024-06-06T15:26:12.977985Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2024-24789 / CISA-ADP", "record": "CVE-2024-24789", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2024-06-10T19:54:41.361Z", "date_only": false, "value": "2024-06-10T19:54:41.361Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2024-37891", "record": "CVE-2024-37891", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-06-13T16:20:49.160Z", "date_only": false, "value": "2024-06-13T16:20:49.160Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-24789 / CISA-ADP", "record": "CVE-2024-24789", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-06-17T00:00:00Z", "date_only": false, "value": "2024-06-17T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse", "record": "rhsa-2024:5258", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2024-06-17T00:00:00Z", "date_only": false, "value": "2024-06-17T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse", "record": "rhsa-2024:5258", "field": "vulnerabilities.8.release_date"}, {"timestamp": "2024-06-17T19:18:32.574Z", "date_only": false, "value": "2024-06-17T19:18:32.574Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2024-37891", "record": "CVE-2024-37891", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-06-17T19:18:32.574Z", "date_only": false, "value": "2024-06-17T19:18:32.574Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-37891 / GitHub_M", "record": "CVE-2024-37891", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-06-17T22:19:58.680Z", "date_only": false, "value": "2024-06-17T22:19:58.680Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2024-6104", "record": "CVE-2024-6104", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-06-18T13:49:45.845Z", "date_only": false, "value": "2024-06-18T13:49:45.845349Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2024-37891 / CISA-ADP", "record": "CVE-2024-37891", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-06-18T13:49:57.293Z", "date_only": false, "value": "2024-06-18T13:49:57.293Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-37891 / CISA-ADP", "record": "CVE-2024-37891", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-06-19T03:05:53.965Z", "date_only": false, "value": "2024-06-19T03:05:53.965Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-24789 / Go", "record": "CVE-2024-24789", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-06-24T00:00:00Z", "date_only": false, "value": "2024-06-24T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse", "record": "rhsa-2024:5258", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2024-06-24T00:00:00Z", "date_only": false, "value": "2024-06-24T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse", "record": "rhsa-2024:5258", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2024-06-24T17:06:21.150Z", "date_only": false, "value": "2024-06-24T17:06:21.150Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2024-6104", "record": "CVE-2024-6104", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-06-24T17:06:21.150Z", "date_only": false, "value": "2024-06-24T17:06:21.150Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-6104 / HashiCorp", "record": "CVE-2024-6104", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-06-24T19:19:22.878Z", "date_only": false, "value": "2024-06-24T19:19:22.878144Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2024-6104 / CISA-ADP", "record": "CVE-2024-6104", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-06-24T19:19:28.773Z", "date_only": false, "value": "2024-06-24T19:19:28.773Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-6104 / CISA-ADP", "record": "CVE-2024-6104", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-06-30T00:00:00Z", "date_only": false, "value": "2024-06-30T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse", "record": "rhsa-2024:5258", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2024-07-01T18:27:33.952Z", "date_only": false, "value": "2024-07-01T18:27:33.952Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2024-37298", "record": "CVE-2024-37298", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-07-01T18:27:33.952Z", "date_only": false, "value": "2024-07-01T18:27:33.952Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-37298 / GitHub_M", "record": "CVE-2024-37298", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-07-01T19:21:12Z", "date_only": false, "value": "2024-07-01T19:21:12+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse", "record": "rhsa-2024:5258", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2024-07-02T14:16:14.834Z", "date_only": false, "value": "2024-07-02T14:16:14.834696Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2024-37298 / CISA-ADP", "record": "CVE-2024-37298", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-07-03T20:58:34.291Z", "date_only": false, "value": "2024-07-03T20:58:34.291Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-37298 / CISA-ADP", "record": "CVE-2024-37298", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-01T18:40:20.583Z", "date_only": false, "value": "2024-08-01T18:40:20.583Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-1394 / CVE", "record": "CVE-2024-1394", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-01T20:20:01.029Z", "date_only": false, "value": "2024-08-01T20:20:01.029Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-3727 / CVE", "record": "CVE-2024-3727", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-01T21:33:04.395Z", "date_only": false, "value": "2024-08-01T21:33:04.395Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-6104", "record": "CVE-2024-6104", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-01T21:33:04.395Z", "date_only": false, "value": "2024-08-01T21:33:04.395Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-6104 / CVE", "record": "CVE-2024-6104", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-01T23:28:12.523Z", "date_only": false, "value": "2024-08-01T23:28:12.523Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-24784 / CVE", "record": "CVE-2024-24784", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-01T23:28:12.597Z", "date_only": false, "value": "2024-08-01T23:28:12.597Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-24783 / CVE", "record": "CVE-2024-24783", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-02T03:50:55.675Z", "date_only": false, "value": "2024-08-02T03:50:55.675Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-37298", "record": "CVE-2024-37298", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-02T03:50:55.675Z", "date_only": false, "value": "2024-08-02T03:50:55.675Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-37298 / CVE", "record": "CVE-2024-37298", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-02T20:21:15.331Z", "date_only": false, "value": "2024-08-02T20:21:15.331Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-45290 / CVE", "record": "CVE-2023-45290", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-05T20:13:24.512Z", "date_only": false, "value": "2024-08-05T20:13:24.512123Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2024-24784 / CISA-ADP", "record": "CVE-2024-24784", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2024-08-05T20:17:30.349Z", "date_only": false, "value": "2024-08-05T20:17:30.349Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-24784 / CISA-ADP", "record": "CVE-2024-24784", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-13T09:16:53Z", "date_only": false, "value": "2024-08-13T09:16:53+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse", "record": "rhsa-2024:5258", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-08-13T09:16:53Z", "date_only": false, "value": "2024-08-13T09:16:53+00:00", "kind": "other", "label": "Date", "source": "csaf_opensuse", "record": "rhsa-2024:5258", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2024-08-13T09:16:53Z", "date_only": false, "value": "2024-08-13T09:16:53+00:00", "kind": "milestone", "label": "Published", "source": "csaf_opensuse", "record": "rhsa-2024:5258", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-11-05T16:57:46.952Z", "date_only": false, "value": "2024-11-05T16:57:46.952Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-24783 / CISA-ADP", "record": "CVE-2024-24783", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-07T11:07:13.798Z", "date_only": false, "value": "2024-11-07T11:07:13.798Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-45290 / CISA-ADP", "record": "CVE-2023-45290", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-13T09:11:16Z", "date_only": false, "value": "2025-01-13T09:11:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1356", "record": "RHSA-2024:5258", "field": "creation_timestamp", "uuid": "8b992b37-e0b6-4881-94b0-138714370cd4", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1394\n\ud83d\udd39 Description: A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs\u200b. The memory leak happens in github.com/golang-fips/openssl/openssl/rsa.go#L113. The objects leaked are pkey\u200b and ctx\u200b. That function uses named return parameters to free pkey\u200b and ctx\u200b if there is an error initializing the context or setting the different properties. All return statements related to error cases follow the \"return nil, nil, fail(...)\" pattern, meaning that pkey\u200b and ctx\u200b will be nil inside the deferred function that should free them.\n\ud83d\udccf Published: 2024-03-21T12:16:38.790Z\n\ud83d\udccf Modified: 2025-01-13T08:35:31.150Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2024:1462\n2. https://access.redhat.com/errata/RHSA-2024:1468\n3. https://access.redhat.com/errata/RHSA-2024:1472\n4. https://access.redhat.com/errata/RHSA-2024:1501\n5. https://access.redhat.com/errata/RHSA-2024:1502\n6. https://access.redhat.com/errata/RHSA-2024:1561\n7. https://access.redhat.com/errata/RHSA-2024:1563\n8. https://access.redhat.com/errata/RHSA-2024:1566\n9. https://access.redhat.com/errata/RHSA-2024:1567\n10. https://access.redhat.com/errata/RHSA-2024:1574\n11. https://access.redhat.com/errata/RHSA-2024:1640\n12. https://access.redhat.com/errata/RHSA-2024:1644\n13. https://access.redhat.com/errata/RHSA-2024:1646\n14. https://access.redhat.com/errata/RHSA-2024:1763\n15. https://access.redhat.com/errata/RHSA-2024:1897\n16. https://access.redhat.com/errata/RHSA-2024:2562\n17. https://access.redhat.com/errata/RHSA-2024:2568\n18. https://access.redhat.com/errata/RHSA-2024:2569\n19. https://access.redhat.com/errata/RHSA-2024:2729\n20. https://access.redhat.com/errata/RHSA-2024:2730\n21. https://access.redhat.com/errata/RHSA-2024:2767\n22. https://access.redhat.com/errata/RHSA-2024:3265\n23. https://access.redhat.com/errata/RHSA-2024:3352\n24. https://access.redhat.com/errata/RHSA-2024:4146\n25. https://access.redhat.com/errata/RHSA-2024:4371\n26. https://access.redhat.com/errata/RHSA-2024:4378\n27. https://access.redhat.com/errata/RHSA-2024:4379\n28. https://access.redhat.com/errata/RHSA-2024:4502\n29. https://access.redhat.com/errata/RHSA-2024:4581\n30. https://access.redhat.com/errata/RHSA-2024:4591\n31. https://access.redhat.com/errata/RHSA-2024:4672\n32. https://access.redhat.com/errata/RHSA-2024:4699\n33. https://access.redhat.com/errata/RHSA-2024:4761\n34. https://access.redhat.com/errata/RHSA-2024:4762\n35. https://access.redhat.com/errata/RHSA-2024:4960\n36. https://access.redhat.com/errata/RHSA-2024:5258\n37. https://access.redhat.com/errata/RHSA-2024:5634\n38. https://access.redhat.com/errata/RHSA-2024:7262\n39. https://access.redhat.com/security/cve/CVE-2024-1394\n40. https://bugzilla.redhat.com/show_bug.cgi?id=2262921\n41. https://github.com/golang-fips/openssl/commit/85d31d0d257ce842c8a1e63c4d230ae850348136\n42. https://github.com/golang-fips/openssl/security/advisories/GHSA-78hx-gp6g-7mj6\n43. https://github.com/microsoft/go-crypto-openssl/commit/104fe7f6912788d2ad44602f77a0a0a62f1f259f\n44. https://pkg.go.dev/vuln/GO-2024-2660\n45. https://vuln.go.dev/ID/GO-2024-2660.json", "url": "https://t.me/DarkWebInformer_CVEAlerts/1356"}, {"timestamp": "2025-01-13T21:12:01Z", "date_only": false, "value": "2025-01-13T21:12:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1393", "record": "RHSA-2024:5258", "field": "creation_timestamp", "uuid": "83ef2fac-5eac-4e8a-afa2-65eacd8ea94b", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-3727\n\ud83d\udd39 Description: A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.\n\ud83d\udccf Published: 2024-05-09T14:57:21.327Z\n\ud83d\udccf Modified: 2025-01-13T20:48:50.544Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2024:0045\n2. https://access.redhat.com/errata/RHSA-2024:3718\n3. https://access.redhat.com/errata/RHSA-2024:4159\n4. https://access.redhat.com/errata/RHSA-2024:4613\n5. https://access.redhat.com/errata/RHSA-2024:4850\n6. https://access.redhat.com/errata/RHSA-2024:4960\n7. https://access.redhat.com/errata/RHSA-2024:5258\n8. https://access.redhat.com/errata/RHSA-2024:5951\n9. https://access.redhat.com/errata/RHSA-2024:6054\n10. https://access.redhat.com/errata/RHSA-2024:6708\n11. https://access.redhat.com/errata/RHSA-2024:6824\n12. https://access.redhat.com/errata/RHSA-2024:7164\n13. https://access.redhat.com/errata/RHSA-2024:7174\n14. https://access.redhat.com/errata/RHSA-2024:7182\n15. https://access.redhat.com/errata/RHSA-2024:7187\n16. https://access.redhat.com/errata/RHSA-2024:7922\n17. https://access.redhat.com/errata/RHSA-2024:7941\n18. https://access.redhat.com/errata/RHSA-2024:8260\n19. https://access.redhat.com/errata/RHSA-2024:8425\n20. https://access.redhat.com/errata/RHSA-2024:9097\n21. https://access.redhat.com/errata/RHSA-2024:9098\n22. https://access.redhat.com/errata/RHSA-2024:9102\n23. https://access.redhat.com/errata/RHSA-2024:9960\n24. https://access.redhat.com/security/cve/CVE-2024-3727\n25. https://bugzilla.redhat.com/show_bug.cgi?id=2274767", "url": "https://t.me/DarkWebInformer_CVEAlerts/1393"}, {"timestamp": "2025-01-31T15:02:43.918Z", "date_only": false, "value": "2025-01-31T15:02:43.918Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-24789 / CVE", "record": "CVE-2024-24789", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-13T17:14:02.493Z", "date_only": false, "value": "2025-02-13T17:14:02.493Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-45290", "record": "CVE-2023-45290", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-02-13T17:40:23.803Z", "date_only": false, "value": "2025-02-13T17:40:23.803Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-24783", "record": "CVE-2024-24783", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-02-13T17:40:24.430Z", "date_only": false, "value": "2025-02-13T17:40:24.430Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-24784", "record": "CVE-2024-24784", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-02-13T17:40:27.816Z", "date_only": false, "value": "2025-02-13T17:40:27.816Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-24789", "record": "CVE-2024-24789", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-02-25T08:25:24Z", "date_only": false, "value": "2025-02-25T08:25:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5260", "record": "RHSA-2024:5258", "field": "creation_timestamp", "uuid": "4f6a2450-a238-4d61-8f6f-2355a10a98c7", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-3727\n\ud83d\udd25 CVSS Score: 8.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks.\n\ud83d\udccf Published: 2024-05-09T14:57:21.327Z\n\ud83d\udccf Modified: 2025-02-25T08:07:16.415Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2024:0045\n2. https://access.redhat.com/errata/RHSA-2024:3718\n3. https://access.redhat.com/errata/RHSA-2024:4159\n4. https://access.redhat.com/errata/RHSA-2024:4613\n5. https://access.redhat.com/errata/RHSA-2024:4850\n6. https://access.redhat.com/errata/RHSA-2024:4960\n7. https://access.redhat.com/errata/RHSA-2024:5258\n8. https://access.redhat.com/errata/RHSA-2024:5951\n9. https://access.redhat.com/errata/RHSA-2024:6054\n10. https://access.redhat.com/errata/RHSA-2024:6122\n11. https://access.redhat.com/errata/RHSA-2024:6708\n12. https://access.redhat.com/errata/RHSA-2024:6818\n13. https://access.redhat.com/errata/RHSA-2024:6824\n14. https://access.redhat.com/errata/RHSA-2024:7164\n15. https://access.redhat.com/errata/RHSA-2024:7174\n16. https://access.redhat.com/errata/RHSA-2024:7182\n17. https://access.redhat.com/errata/RHSA-2024:7187\n18. https://access.redhat.com/errata/RHSA-2024:7922\n19. https://access.redhat.com/errata/RHSA-2024:7941\n20. https://access.redhat.com/errata/RHSA-2024:8260\n21. https://access.redhat.com/errata/RHSA-2024:8425\n22. https://access.redhat.com/errata/RHSA-2024:9097\n23. https://access.redhat.com/errata/RHSA-2024:9098\n24. https://access.redhat.com/errata/RHSA-2024:9102\n25. https://access.redhat.com/errata/RHSA-2024:9960\n26. https://access.redhat.com/security/cve/CVE-2024-3727\n27. https://bugzilla.redhat.com/show_bug.cgi?id=2274767", "url": "https://t.me/DarkWebInformer_CVEAlerts/5260"}, {"timestamp": "2025-05-12T23:29:31Z", "date_only": false, "value": "2025-05-12T23:29:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16071", "record": "RHSA-2024:5258", "field": "creation_timestamp", "uuid": "461d9c0d-cc40-417a-b563-33671c547adf", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1394\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs\u200b. The memory leak happens in github.com/golang-fips/openssl/openssl/rsa.go#L113. The objects leaked are pkey\u200b and ctx\u200b. That function uses named return parameters to free pkey\u200b and ctx\u200b if there is an error initializing the context or setting the different properties. All return statements related to error cases follow the \"return nil, nil, fail(...)\" pattern, meaning that pkey\u200b and ctx\u200b will be nil inside the deferred function that should free them.\n\ud83d\udccf Published: 2024-03-21T12:16:38.790Z\n\ud83d\udccf Modified: 2025-05-12T23:02:02.486Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2024:1462\n2. https://access.redhat.com/errata/RHSA-2024:1468\n3. https://access.redhat.com/errata/RHSA-2024:1472\n4. https://access.redhat.com/errata/RHSA-2024:1501\n5. https://access.redhat.com/errata/RHSA-2024:1502\n6. https://access.redhat.com/errata/RHSA-2024:1561\n7. https://access.redhat.com/errata/RHSA-2024:1563\n8. https://access.redhat.com/errata/RHSA-2024:1566\n9. https://access.redhat.com/errata/RHSA-2024:1567\n10. https://access.redhat.com/errata/RHSA-2024:1574\n11. https://access.redhat.com/errata/RHSA-2024:1640\n12. https://access.redhat.com/errata/RHSA-2024:1644\n13. https://access.redhat.com/errata/RHSA-2024:1646\n14. https://access.redhat.com/errata/RHSA-2024:1763\n15. https://access.redhat.com/errata/RHSA-2024:1897\n16. https://access.redhat.com/errata/RHSA-2024:2562\n17. https://access.redhat.com/errata/RHSA-2024:2568\n18. https://access.redhat.com/errata/RHSA-2024:2569\n19. https://access.redhat.com/errata/RHSA-2024:2729\n20. https://access.redhat.com/errata/RHSA-2024:2730\n21. https://access.redhat.com/errata/RHSA-2024:2767\n22. https://access.redhat.com/errata/RHSA-2024:3265\n23. https://access.redhat.com/errata/RHSA-2024:3352\n24. https://access.redhat.com/errata/RHSA-2024:4146\n25. https://access.redhat.com/errata/RHSA-2024:4371\n26. https://access.redhat.com/errata/RHSA-2024:4378\n27. https://access.redhat.com/errata/RHSA-2024:4379\n28. https://access.redhat.com/errata/RHSA-2024:4502\n29. https://access.redhat.com/errata/RHSA-2024:4581\n30. https://access.redhat.com/errata/RHSA-2024:4591\n31. https://access.redhat.com/errata/RHSA-2024:4672\n32. https://access.redhat.com/errata/RHSA-2024:4699\n33. https://access.redhat.com/errata/RHSA-2024:4761\n34. https://access.redhat.com/errata/RHSA-2024:4762\n35. https://access.redhat.com/errata/RHSA-2024:4960\n36. https://access.redhat.com/errata/RHSA-2024:5258\n37. https://access.redhat.com/errata/RHSA-2024:5634\n38. https://access.redhat.com/errata/RHSA-2024:7262\n39. https://access.redhat.com/security/cve/CVE-2024-1394\n40. https://bugzilla.redhat.com/show_bug.cgi?id=2262921\n41. https://github.com/golang-fips/openssl/commit/85d31d0d257ce842c8a1e63c4d230ae850348136\n42. https://github.com/golang-fips/openssl/security/advisories/GHSA-78hx-gp6g-7mj6\n43. https://github.com/microsoft/go-crypto-openssl/commit/104fe7f6912788d2ad44602f77a0a0a62f1f259f\n44. https://pkg.go.dev/vuln/GO-2024-2660\n45. https://vuln.go.dev/ID/GO-2024-2660.json", "url": "https://t.me/DarkWebInformer_CVEAlerts/16071"}, {"timestamp": "2025-11-03T21:55:35.021Z", "date_only": false, "value": "2025-11-03T21:55:35.021Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-37891", "record": "CVE-2024-37891", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-11-03T21:55:35.021Z", "date_only": false, "value": "2025-11-03T21:55:35.021Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-37891 / CVE", "record": "CVE-2024-37891", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-08T23:18:22.276Z", "date_only": false, "value": "2026-10-08T23:18:22.276Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-1394", "record": "CVE-2024-1394", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-08T23:18:22.276Z", "date_only": false, "value": "2026-10-08T23:18:22.276Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-1394 / redhat", "record": "CVE-2024-1394", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T23:47:32.268Z", "date_only": false, "value": "2026-10-13T23:47:32.268Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-3727", "record": "CVE-2024-3727", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-13T23:47:32.268Z", "date_only": false, "value": "2026-10-13T23:47:32.268Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-3727 / redhat", "record": "CVE-2024-3727", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T11:30:53Z", "date_only": false, "value": "2026-10-15T11:30:53+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse", "record": "rhsa-2024:5258", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-15T11:30:53Z", "date_only": false, "value": "2026-10-15T11:30:53+00:00", "kind": "other", "label": "Document generated", "source": "csaf_opensuse", "record": "rhsa-2024:5258", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-15T11:30:53Z", "date_only": false, "value": "2026-10-15T11:30:53+00:00", "kind": "other", "label": "Updated", "source": "csaf_opensuse", "record": "rhsa-2024:5258", "field": "document.tracking.current_release_date"}]}