CVE-2024-1394

HIGH 7.5

Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads

CVSS Score

7.5

EPSS Score

0.9%

EPSS Percentile

75th

A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs. The memory leak happens in github.com/golang-fips/openssl/openssl/rsa.go#L113. The objects leaked are pkey and ctx. That function uses named return parameters to free pkey and ctx if there is an error initializing the context or setting the different properties. All return statements related to error cases follow the "return nil, nil, fail(...)" pattern, meaning that pkey and ctx will be nil inside the deferred function that should free them.

CWE	CWE-401
Vendor	red hat
Product	red hat ansible automation platform 2.4 for rhel 8
Published	Mar 21, 2024
Last Updated	Mar 26, 2026

Stay Ahead of the Next One

Get instant alerts for red hat red hat ansible automation platform 2.4 for rhel 8

Be the first to know when new high vulnerabilities affecting red hat red hat ansible automation platform 2.4 for rhel 8 are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Affected Versions

Red Hat / Red Hat Ansible Automation Platform 2.4 for RHEL 8

All versions affected

Red Hat / Red Hat Ansible Automation Platform 2.4 for RHEL 9

All versions affected

Red Hat / Red Hat Developer Tools

All versions affected

Red Hat / Red Hat Enterprise Linux 8

All versions affected

Red Hat / Red Hat Enterprise Linux 8

All versions affected

Red Hat / Red Hat Enterprise Linux 8

All versions affected

Red Hat / Red Hat Enterprise Linux 8

All versions affected

Red Hat / Red Hat Enterprise Linux 8

All versions affected

Red Hat / Red Hat Enterprise Linux 8

All versions affected

Red Hat / Red Hat Enterprise Linux 9

All versions affected

Red Hat / Red Hat Enterprise Linux 9

All versions affected

Red Hat / Red Hat Enterprise Linux 9

All versions affected

Red Hat / Red Hat Enterprise Linux 9

All versions affected

Red Hat / Red Hat Enterprise Linux 9

All versions affected

Red Hat / Red Hat Enterprise Linux 9

All versions affected

Red Hat / Red Hat Enterprise Linux 9

All versions affected

Red Hat / Red Hat Enterprise Linux 9

All versions affected

Red Hat / Red Hat Enterprise Linux 9

All versions affected

Red Hat / Red Hat Enterprise Linux 9

All versions affected

Red Hat / Red Hat Enterprise Linux 9

All versions affected

Red Hat / Red Hat Enterprise Linux 9

All versions affected

Red Hat / Red Hat Enterprise Linux 9

All versions affected

Red Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

All versions affected

Red Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

All versions affected

Red Hat / Red Hat Enterprise Linux 9.2 Extended Update Support

All versions affected

Red Hat / Red Hat Enterprise Linux 9.2 Extended Update Support

All versions affected

Red Hat / Red Hat OpenShift Container Platform 4.12

All versions affected

Red Hat / Red Hat OpenShift Container Platform 4.12

All versions affected

Red Hat / Red Hat OpenShift Container Platform 4.12

All versions affected

Red Hat / Red Hat OpenShift Container Platform 4.12

All versions affected

Red Hat / Red Hat OpenShift Container Platform 4.12

All versions affected

Red Hat / Red Hat OpenShift Container Platform 4.12

All versions affected

Red Hat / Red Hat OpenShift Container Platform 4.12

All versions affected

Red Hat / Red Hat OpenShift Container Platform 4.12

All versions affected

Red Hat / Red Hat OpenShift Container Platform 4.12

All versions affected

Red Hat / Red Hat OpenShift Container Platform 4.12

All versions affected

Red Hat / Red Hat OpenShift Container Platform 4.13

All versions affected

Red Hat / Red Hat OpenShift Container Platform 4.13

All versions affected

Red Hat / Red Hat OpenShift Container Platform 4.13

All versions affected

Red Hat / Red Hat OpenShift Container Platform 4.13

All versions affected

Red Hat / Red Hat OpenShift Container Platform 4.13

All versions affected

Red Hat / Red Hat OpenShift Container Platform 4.13

All versions affected

Red Hat / Red Hat OpenShift Container Platform 4.13

All versions affected

Red Hat / Red Hat OpenShift Container Platform 4.13

All versions affected

Red Hat / Red Hat OpenShift Container Platform 4.13

All versions affected