GO-2024-3282
Potential slowdown / DoS when parsing specially crafted PEM inputs in github.com/cert-manager/cert-manager
At a glance
- Published
- Updated
- CVE
- CVE-2024-12401
- Aliases
- GHSA-r4pg-vg54-wxx4
Description
Potential slowdown / DoS when parsing specially crafted PEM inputs in github.com/cert-manager/cert-manager
Affected packages
| Package | Versions |
|---|---|
| Go · github.com/cert-manager/cert-manager | introduced 0, fixed 1.12.14, introduced 1.13.0-alpha.0, fixed 1.15.4, introduced 1.16.0-alpha.0, fixed 1.16.2 |
References
- https://github.com/cert-manager/cert-manager/security/advisories/GHSA-r4pg-vg54-wxx4 ADVISORY
- https://github.com/cert-manager/cert-manager/commit/3a4c9eb55e2e43570679840bbe3217869fbc8efc FIX
- https://github.com/cert-manager/cert-manager/commit/f22f78c8c0a64d718e203b326bc844c488ad7850 FIX
- https://github.com/cert-manager/cert-manager/pull/7400 FIX
- https://github.com/cert-manager/cert-manager/pull/7401 FIX
- https://github.com/cert-manager/cert-manager/pull/7402 FIX
- https://github.com/cert-manager/cert-manager/pull/7403 FIX
- https://go.dev/issue/50116 REPORT
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |