https://db.gcve.eu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 14 May 2026 19:58:00 +0000 https://db.gcve.eu/sighting/3def5c1a-1791-4096-9e28-4319a92cf36a/export {"uuid": "3def5c1a-1791-4096-9e28-4319a92cf36a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "RHSA-2024:8678", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/270", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-9355\n\ud83d\udd39 Description: A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted computed hmac sum to an untrusted input sum if an attacker can send a zeroed buffer in place of a pre-computed sum.\u00a0 It is also possible to force a derived key to be all zeros instead of an unpredictable value.\u00a0 This may have follow-on implications for the Go TLS stack.\n\ud83d\udccf Published: 2024-10-01T18:17:29.420Z\n\ud83d\udccf Modified: 2025-01-06T22:01:58.132Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2024:10133\n2. https://access.redhat.com/errata/RHSA-2024:7502\n3. https://access.redhat.com/errata/RHSA-2024:7550\n4. https://access.redhat.com/errata/RHSA-2024:8327\n5. https://access.redhat.com/errata/RHSA-2024:8678\n6. https://access.redhat.com/errata/RHSA-2024:8847\n7. https://access.redhat.com/errata/RHSA-2024:9551\n8. https://access.redhat.com/security/cve/CVE-2024-9355\n9. https://bugzilla.redhat.com/show_bug.cgi?id=2315719", "creation_timestamp": "2025-01-06T22:38:12.000000Z"} {"uuid": "3def5c1a-1791-4096-9e28-4319a92cf36a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "RHSA-2024:8678", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/270", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-9355\n\ud83d\udd39 Description: A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted computed hmac sum to an untrusted input sum if an attacker can send a zeroed buffer in place of a pre-computed sum.\u00a0 It is also possible to force a derived key to be all zeros instead of an unpredictable value.\u00a0 This may have follow-on implications for the Go TLS stack.\n\ud83d\udccf Published: 2024-10-01T18:17:29.420Z\n\ud83d\udccf Modified: 2025-01-06T22:01:58.132Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2024:10133\n2. https://access.redhat.com/errata/RHSA-2024:7502\n3. https://access.redhat.com/errata/RHSA-2024:7550\n4. https://access.redhat.com/errata/RHSA-2024:8327\n5. https://access.redhat.com/errata/RHSA-2024:8678\n6. https://access.redhat.com/errata/RHSA-2024:8847\n7. https://access.redhat.com/errata/RHSA-2024:9551\n8. https://access.redhat.com/security/cve/CVE-2024-9355\n9. https://bugzilla.redhat.com/show_bug.cgi?id=2315719", "creation_timestamp": "2025-01-06T22:38:12.000000Z"} https://db.gcve.eu/sighting/3def5c1a-1791-4096-9e28-4319a92cf36a/export Mon, 06 Jan 2025 22:38:12 +0000 https://db.gcve.eu/sighting/98d87347-ba20-4154-b425-b1f806fa00af/export {"uuid": "98d87347-ba20-4154-b425-b1f806fa00af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "RHSA-2024:8678", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7582", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-9355\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L)\n\ud83d\udd39 Description: A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted computed hmac sum to an untrusted input sum if an attacker can send a zeroed buffer in place of a pre-computed sum.\u00a0 It is also possible to force a derived key to be all zeros instead of an unpredictable value.\u00a0 This may have follow-on implications for the Go TLS stack.\n\ud83d\udccf Published: 2024-10-01T18:17:29.420Z\n\ud83d\udccf Modified: 2025-03-14T16:37:39.420Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2024:10133\n2. https://access.redhat.com/errata/RHSA-2024:7502\n3. https://access.redhat.com/errata/RHSA-2024:7550\n4. https://access.redhat.com/errata/RHSA-2024:8327\n5. https://access.redhat.com/errata/RHSA-2024:8678\n6. https://access.redhat.com/errata/RHSA-2024:8847\n7. https://access.redhat.com/errata/RHSA-2024:9551\n8. https://access.redhat.com/errata/RHSA-2025:2416\n9. https://access.redhat.com/security/cve/CVE-2024-9355\n10. https://bugzilla.redhat.com/show_bug.cgi?id=2315719", "creation_timestamp": "2025-03-14T16:43:57.000000Z"} {"uuid": "98d87347-ba20-4154-b425-b1f806fa00af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "RHSA-2024:8678", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7582", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-9355\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L)\n\ud83d\udd39 Description: A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted computed hmac sum to an untrusted input sum if an attacker can send a zeroed buffer in place of a pre-computed sum.\u00a0 It is also possible to force a derived key to be all zeros instead of an unpredictable value.\u00a0 This may have follow-on implications for the Go TLS stack.\n\ud83d\udccf Published: 2024-10-01T18:17:29.420Z\n\ud83d\udccf Modified: 2025-03-14T16:37:39.420Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2024:10133\n2. https://access.redhat.com/errata/RHSA-2024:7502\n3. https://access.redhat.com/errata/RHSA-2024:7550\n4. https://access.redhat.com/errata/RHSA-2024:8327\n5. https://access.redhat.com/errata/RHSA-2024:8678\n6. https://access.redhat.com/errata/RHSA-2024:8847\n7. https://access.redhat.com/errata/RHSA-2024:9551\n8. https://access.redhat.com/errata/RHSA-2025:2416\n9. https://access.redhat.com/security/cve/CVE-2024-9355\n10. https://bugzilla.redhat.com/show_bug.cgi?id=2315719", "creation_timestamp": "2025-03-14T16:43:57.000000Z"} https://db.gcve.eu/sighting/98d87347-ba20-4154-b425-b1f806fa00af/export Fri, 14 Mar 2025 16:43:57 +0000 https://db.gcve.eu/sighting/16af4c68-b168-4369-8103-9755721bf06e/export {"uuid": "16af4c68-b168-4369-8103-9755721bf06e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "RHSA-2024:8678", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8819", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-9355\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L)\n\ud83d\udd39 Description: A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted computed hmac sum to an untrusted input sum if an attacker can send a zeroed buffer in place of a pre-computed sum.\u00a0 It is also possible to force a derived key to be all zeros instead of an unpredictable value.\u00a0 This may have follow-on implications for the Go TLS stack.\n\ud83d\udccf Published: 2024-10-01T18:17:29.420Z\n\ud83d\udccf Modified: 2025-03-26T09:59:51.092Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2024:10133\n2. https://access.redhat.com/errata/RHSA-2024:7502\n3. https://access.redhat.com/errata/RHSA-2024:7550\n4. https://access.redhat.com/errata/RHSA-2024:8327\n5. https://access.redhat.com/errata/RHSA-2024:8678\n6. https://access.redhat.com/errata/RHSA-2024:8847\n7. https://access.redhat.com/errata/RHSA-2024:9551\n8. https://access.redhat.com/errata/RHSA-2025:2416\n9. https://access.redhat.com/security/cve/CVE-2024-9355\n10. https://bugzilla.redhat.com/show_bug.cgi?id=2315719", "creation_timestamp": "2025-03-26T10:25:16.000000Z"} {"uuid": "16af4c68-b168-4369-8103-9755721bf06e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "RHSA-2024:8678", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8819", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-9355\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L)\n\ud83d\udd39 Description: A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted computed hmac sum to an untrusted input sum if an attacker can send a zeroed buffer in place of a pre-computed sum.\u00a0 It is also possible to force a derived key to be all zeros instead of an unpredictable value.\u00a0 This may have follow-on implications for the Go TLS stack.\n\ud83d\udccf Published: 2024-10-01T18:17:29.420Z\n\ud83d\udccf Modified: 2025-03-26T09:59:51.092Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2024:10133\n2. https://access.redhat.com/errata/RHSA-2024:7502\n3. https://access.redhat.com/errata/RHSA-2024:7550\n4. https://access.redhat.com/errata/RHSA-2024:8327\n5. https://access.redhat.com/errata/RHSA-2024:8678\n6. https://access.redhat.com/errata/RHSA-2024:8847\n7. https://access.redhat.com/errata/RHSA-2024:9551\n8. https://access.redhat.com/errata/RHSA-2025:2416\n9. https://access.redhat.com/security/cve/CVE-2024-9355\n10. https://bugzilla.redhat.com/show_bug.cgi?id=2315719", "creation_timestamp": "2025-03-26T10:25:16.000000Z"} https://db.gcve.eu/sighting/16af4c68-b168-4369-8103-9755721bf06e/export Wed, 26 Mar 2025 10:25:16 +0000