NIST deprecates RSA-2048 from 2030. Find every one of them before attackers do.
🐹
🐹 Go
Not in CISA KEV
MEDIUM severity

CVE-2024-9355 — openssl

MEDIUMFix: golang-fips/openssl#198

CVE-2024-9355 is a medium-severity (CVSS 6.5) CWE-457 vulnerability in github.com/golang-fips/openssl. The records list no fixed version yet; check the vendor advisory below and apply the mitigations in the meantime.

Golang FIPS OpenSSL has a Use of Uninitialized Variable vulnerability

Also known asGO-2024-3167
Published
Updated
Affected
1 pkg
Patched
See advisory
Exploits
None indexed
Exploitation data as of Nov 5, 2026 · OSV.dev, NVD, FIRST.org (EPSS)

Exploitation Status

No confirmed exploitation observed yet

  • A successful exploit gives an attacker total control of the affected component, not partial access.
  • CISA’s own triage has not observed active exploitation or public proof-of-concept code for this CVE as of its last assessment.

Exploitation and automatability from CISA’s SSVC triage for CVE-2024-9355.

EPSS Exploitation Probability

via FIRST.org ↗
0.3%probability of exploitation in next 30 days
Lower Risk0.00%
Lower risk than most CVEs23th percentile — riskier than 23% of all scored CVEsHighest risk
0.00%0.27%0.53%0.80%0.1%0.3%May 26Sep 26Nov 26

Probability of exploitation in the next 30 days, from FIRST.org EPSS.

How urgent is this, really

Where this sits among everything scored

Real-World Exposure

1 pkg affected
🐹github.com/golang-fips/openssl

Real-time download stats are indexed for npm and PyPI packages. This vulnerability affects Go packages — download data is not available via public APIs for these ecosystems.

Description

A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted computed hmac sum to an untrusted input sum if an attacker can send a zeroed buffer in place of a pre-computed sum.  It is also possible to force a derived key to be all zeros instead of an unpredictable value.  This may have follow-on implications for the Go TLS stack.

Affected Packages

1 total
EcosystemPackageVulnerable rangeFix
🐹Gogithub.com/golang-fips/opensslall versionsNo fix

Detection & mitigation playbook

Open-source dependency

  1. Detect

    Scan your dependency tree (package-lock.json, pnpm-lock.yaml, requirements.txt, go.sum, etc.) for github.com/golang-fips/openssl, including transitive dependencies — a direct dependency you never call can still pull in a vulnerable version.

  2. Remediation status

    The records we use list no patched version of github.com/golang-fips/openssl for CVE-2024-9355. Check the maintainer's advisory, and where your build allows, override or pin the dependency away from the vulnerable range.

  3. Mitigate without a patch

    If you can't upgrade right away: gate or disable the affected feature, validate untrusted input at the boundary, and avoid passing attacker-controlled data into the vulnerable path. O3's runtime protection blocks exploitation in production as an interim safeguard until the upgrade lands.

Fixing This On Your OS

If you run this on a Linux distribution, patch through your package manager against the distro's own security advisory below — it tracks the exact backported fix for your release, which can ship on a different timeline (and sometimes a different severity) than the upstream project.

Red HatModerate

This issue is specific to the Go language and only affects the test code in cri-o and conmon, not the production code. Since both projects use Go exclusively for testing purposes, this issue does not impact their production environment. Therefore, cri-o and conmon are not affected by this vulnerability.

Workaround published by Red Hat
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Source: Red Hat security advisory for CVE-2024-9355 (CC BY 4.0)
ProductFixed inAdvisory
Red Hat Enterprise Linux 7 Extended Lifecycle Supportrhc-worker-script-0:0.10-2.el7_9RHSA-2024:10133
Red Hat Enterprise Linux 8go-toolset:rhel8-8100020241001112709.a3795deeRHSA-2024:7502
Red Hat Enterprise Linux 8grafana-0:9.2.10-20.el8_10RHSA-2024:8327
Red Hat Enterprise Linux 8grafana-pcp-0:5.1.1-9.el8_10RHSA-2024:8847
Red Hat Enterprise Linux 8osbuild-composer-0:101.5-2.el8_10RHSA-2026:66016
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportrhc-1:0.2.0-6.el8_4.2RHSA-2026:92217
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportosbuild-composer-0:46.3-8.el8_6RHSA-2026:69235
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportrhc-1:0.2.1-14.el8_6.1RHSA-2026:90725

Frequently Asked Questions

A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted computed hmac sum to an untrusted input sum if an attacker can send a zeroed buffer in place of a pre-computed sum.  It is also possible to force a derived key to be all zeros instead of an unpredictable value.  This may have follow-on implications for the Go TLS stack.
O3 Security · Impact-Aware SCA

Is CVE-2024-9355 in your dependencies?

Find it across Go, including transitive dependencies.

Scan my dependencies How O3 SCA works
CVE-2024-9355: openssl (Medium 6.5)