{"metadata": {"vulnerability": "rhsa-2024:8327", "count": 29, "kinds": {"milestone": 5, "sighting": 3, "kev": 0, "other": 21}}, "data": [{"timestamp": "2024-09-30T17:07:30.833Z", "date_only": false, "value": "2024-09-30T17:07:30.833Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2024-9355", "record": "CVE-2024-9355", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-09-30T17:51:17.811Z", "date_only": false, "value": "2024-09-30T17:51:17.811000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse", "record": "rhsa-2024:8327", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2024-09-30T17:51:17.811Z", "date_only": false, "value": "2024-09-30T17:51:17.811Z", "kind": "other", "label": "Time", "source": "cvelistv5 \u00b7 CVE-2024-9355 / redhat", "record": "CVE-2024-9355", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2024-09-30T20:53:42.833Z", "date_only": false, "value": "2024-09-30T20:53:42.833Z", "kind": "other", "label": "Made public", "source": "cvelistv5 \u00b7 CVE-2024-9355 / redhat", "record": "CVE-2024-9355", "field": "containers.cna.datePublic"}, {"timestamp": "2024-09-30T20:53:42.833Z", "date_only": false, "value": "2024-09-30T20:53:42.833000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse", "record": "rhsa-2024:8327", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-09-30T20:53:42.833Z", "date_only": false, "value": "2024-09-30T20:53:42.833Z", "kind": "other", "label": "Time", "source": "cvelistv5 \u00b7 CVE-2024-9355 / redhat", "record": "CVE-2024-9355", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2024-10-01T18:17:29.420Z", "date_only": false, "value": "2024-10-01T18:17:29.420Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2024-9355", "record": "CVE-2024-9355", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-10-01T18:35:51.670Z", "date_only": false, "value": "2024-10-01T18:35:51.670441Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2024-9355 / CISA-ADP", "record": "CVE-2024-9355", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-10-01T18:37:53.436Z", "date_only": false, "value": "2024-10-01T18:37:53.436Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-9355 / CISA-ADP", "record": "CVE-2024-9355", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-04T16:00:09.630Z", "date_only": false, "value": "2024-10-04T16:00:09.630Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2024-47875", "record": "CVE-2024-47875", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-10-11T14:59:27.641Z", "date_only": false, "value": "2024-10-11T14:59:27.641Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2024-47875", "record": "CVE-2024-47875", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-10-11T14:59:27.641Z", "date_only": false, "value": "2024-10-11T14:59:27.641Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-47875 / GitHub_M", "record": "CVE-2024-47875", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-11T15:15:05.860Z", "date_only": false, "value": "2024-10-11T15:15:05.860000+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse", "record": "rhsa-2024:8327", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2024-10-11T15:20:07.304Z", "date_only": false, "value": "2024-10-11T15:20:07.304345+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse", "record": "rhsa-2024:8327", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2024-10-11T19:27:35.590Z", "date_only": false, "value": "2024-10-11T19:27:35.590076Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2024-47875 / CISA-ADP", "record": "CVE-2024-47875", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-10-11T19:27:57.706Z", "date_only": false, "value": "2024-10-11T19:27:57.706Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-47875 / CISA-ADP", "record": "CVE-2024-47875", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-22T15:15:27Z", "date_only": false, "value": "2024-10-22T15:15:27+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse", "record": "rhsa-2024:8327", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-10-22T15:15:27Z", "date_only": false, "value": "2024-10-22T15:15:27+00:00", "kind": "other", "label": "Date", "source": "csaf_opensuse", "record": "rhsa-2024:8327", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2024-10-22T15:15:27Z", "date_only": false, "value": "2024-10-22T15:15:27+00:00", "kind": "milestone", "label": "Published", "source": "csaf_opensuse", "record": "rhsa-2024:8327", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-01-06T22:38:12Z", "date_only": false, "value": "2025-01-06T22:38:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/270", "record": "RHSA-2024:8327", "field": "creation_timestamp", "uuid": "6a9db645-932e-48c1-8699-eb7a7ef147e3", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-9355\n\ud83d\udd39 Description: A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted computed hmac sum to an untrusted input sum if an attacker can send a zeroed buffer in place of a pre-computed sum.\u00a0 It is also possible to force a derived key to be all zeros instead of an unpredictable value.\u00a0 This may have follow-on implications for the Go TLS stack.\n\ud83d\udccf Published: 2024-10-01T18:17:29.420Z\n\ud83d\udccf Modified: 2025-01-06T22:01:58.132Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2024:10133\n2. https://access.redhat.com/errata/RHSA-2024:7502\n3. https://access.redhat.com/errata/RHSA-2024:7550\n4. https://access.redhat.com/errata/RHSA-2024:8327\n5. https://access.redhat.com/errata/RHSA-2024:8678\n6. https://access.redhat.com/errata/RHSA-2024:8847\n7. https://access.redhat.com/errata/RHSA-2024:9551\n8. https://access.redhat.com/security/cve/CVE-2024-9355\n9. https://bugzilla.redhat.com/show_bug.cgi?id=2315719", "url": "https://t.me/DarkWebInformer_CVEAlerts/270"}, {"timestamp": "2025-03-14T16:43:57Z", "date_only": false, "value": "2025-03-14T16:43:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7582", "record": "RHSA-2024:8327", "field": "creation_timestamp", "uuid": "6cf89f3d-ce84-42b2-a560-470c860a2c4c", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-9355\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L)\n\ud83d\udd39 Description: A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted computed hmac sum to an untrusted input sum if an attacker can send a zeroed buffer in place of a pre-computed sum.\u00a0 It is also possible to force a derived key to be all zeros instead of an unpredictable value.\u00a0 This may have follow-on implications for the Go TLS stack.\n\ud83d\udccf Published: 2024-10-01T18:17:29.420Z\n\ud83d\udccf Modified: 2025-03-14T16:37:39.420Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2024:10133\n2. https://access.redhat.com/errata/RHSA-2024:7502\n3. https://access.redhat.com/errata/RHSA-2024:7550\n4. https://access.redhat.com/errata/RHSA-2024:8327\n5. https://access.redhat.com/errata/RHSA-2024:8678\n6. https://access.redhat.com/errata/RHSA-2024:8847\n7. https://access.redhat.com/errata/RHSA-2024:9551\n8. https://access.redhat.com/errata/RHSA-2025:2416\n9. https://access.redhat.com/security/cve/CVE-2024-9355\n10. https://bugzilla.redhat.com/show_bug.cgi?id=2315719", "url": "https://t.me/DarkWebInformer_CVEAlerts/7582"}, {"timestamp": "2025-03-26T10:25:16Z", "date_only": false, "value": "2025-03-26T10:25:16.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8819", "record": "RHSA-2024:8327", "field": "creation_timestamp", "uuid": "458b16de-e252-45c4-8053-7bbfa3134d1f", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-9355\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L)\n\ud83d\udd39 Description: A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted computed hmac sum to an untrusted input sum if an attacker can send a zeroed buffer in place of a pre-computed sum.\u00a0 It is also possible to force a derived key to be all zeros instead of an unpredictable value.\u00a0 This may have follow-on implications for the Go TLS stack.\n\ud83d\udccf Published: 2024-10-01T18:17:29.420Z\n\ud83d\udccf Modified: 2025-03-26T09:59:51.092Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2024:10133\n2. https://access.redhat.com/errata/RHSA-2024:7502\n3. https://access.redhat.com/errata/RHSA-2024:7550\n4. https://access.redhat.com/errata/RHSA-2024:8327\n5. https://access.redhat.com/errata/RHSA-2024:8678\n6. https://access.redhat.com/errata/RHSA-2024:8847\n7. https://access.redhat.com/errata/RHSA-2024:9551\n8. https://access.redhat.com/errata/RHSA-2025:2416\n9. https://access.redhat.com/security/cve/CVE-2024-9355\n10. https://bugzilla.redhat.com/show_bug.cgi?id=2315719", "url": "https://t.me/DarkWebInformer_CVEAlerts/8819"}, {"timestamp": "2025-11-03T20:40:56.817Z", "date_only": false, "value": "2025-11-03T20:40:56.817Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-47875", "record": "CVE-2024-47875", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-11-03T20:40:56.817Z", "date_only": false, "value": "2025-11-03T20:40:56.817Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-47875 / CVE", "record": "CVE-2024-47875", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-29T22:08:28.244Z", "date_only": false, "value": "2026-10-29T22:08:28.244Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-9355", "record": "CVE-2024-9355", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-29T22:08:28.244Z", "date_only": false, "value": "2026-10-29T22:08:28.244Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-9355 / redhat", "record": "CVE-2024-9355", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-03T16:58:06Z", "date_only": false, "value": "2026-11-03T16:58:06+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse", "record": "rhsa-2024:8327", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-11-03T16:58:06Z", "date_only": false, "value": "2026-11-03T16:58:06+00:00", "kind": "other", "label": "Document generated", "source": "csaf_opensuse", "record": "rhsa-2024:8327", "field": "document.tracking.generator.date"}, {"timestamp": "2026-11-03T16:58:06Z", "date_only": false, "value": "2026-11-03T16:58:06+00:00", "kind": "other", "label": "Updated", "source": "csaf_opensuse", "record": "rhsa-2024:8327", "field": "document.tracking.current_release_date"}]}