{"id":"EUVD-2024-2916","revision":null,"records":[{"revision":"89cf3e0bbaf648cba3e1b5d4262971e9","observedAt":"2026-11-10T19:21:22.605+00:00","statement":{"source":"cve-program","id":"CVE-2024-9355","aliases":[],"title":"Golang-fips: golang fips zeroed buffer","description":"A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted computed hmac sum to an untrusted input sum if an attacker can send a zeroed buffer in place of a pre-computed sum.\u00A0 It is also possible to force a derived key to be all zeros instead of an unpredictable value.\u00A0 This may have follow-on implications for the Go TLS stack.","state":0,"publishedAt":"2024-10-01T18:17:29.42+00:00","modifiedAt":"2026-11-10T17:49:15.914+00:00","affected":[{"ecosystem":"https://github.com/golang-fips/openssl","name":"github.com/golang-fips/openssl","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"packageName\": \"github.com/golang-fips/openssl\",\n \"collectionURL\": \"https://github.com/golang-fips/openssl\",\n \"defaultStatus\": \"affected\"\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"rhc-worker-script","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 7 Extended Lifecycle Support\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"rhc-worker-script\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:0.10-2.el7_9\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/o:redhat:rhel_els:7\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"go-toolset:rhel8","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 8\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"go-toolset:rhel8\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"8100020241001112709.a3795dee\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:8::appstream\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"grafana","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 8\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"grafana\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:9.2.10-20.el8_10\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:8::appstream\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"grafana-pcp","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 8\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"grafana-pcp\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:5.1.1-9.el8_10\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:8::appstream\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"osbuild-composer","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 8\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"osbuild-composer\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:101.5-2.el8_10\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:8::appstream\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"rhc","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"rhc\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1:0.2.0-6.el8_4.2\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:rhel_aus:8.4::appstream\",\n \"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"rhc","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"rhc\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1:0.2.0-6.el8_4.2\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:rhel_aus:8.4::appstream\",\n \"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"osbuild-composer","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"osbuild-composer\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:46.3-8.el8_6\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:rhel_aus:8.6::appstream\",\n \"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"rhc","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"rhc\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1:0.2.1-14.el8_6.1\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:rhel_aus:8.6::appstream\",\n \"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"osbuild-composer","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"osbuild-composer\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:46.3-8.el8_6\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:rhel_aus:8.6::appstream\",\n \"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"rhc","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"rhc\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1:0.2.1-14.el8_6.1\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:rhel_aus:8.6::appstream\",\n \"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"osbuild-composer","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"osbuild-composer\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:75-10.el8_8\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:rhel_e4s:8.8::appstream\",\n \"cpe:/a:redhat:rhel_tus:8.8::appstream\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"rhc","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"rhc\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1:0.2.2-1.el8_8.3\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:rhel_e4s:8.8::appstream\",\n \"cpe:/a:redhat:rhel_tus:8.8::appstream\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"osbuild-composer","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"osbuild-composer\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:75-10.el8_8\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:rhel_e4s:8.8::appstream\",\n \"cpe:/a:redhat:rhel_tus:8.8::appstream\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"rhc","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"rhc\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1:0.2.2-1.el8_8.3\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:rhel_e4s:8.8::appstream\",\n \"cpe:/a:redhat:rhel_tus:8.8::appstream\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"golang","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 9\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"golang\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:1.21.13-4.el9_4\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:9::appstream\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"grafana","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 9\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"grafana\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:9.2.10-19.el9_4\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:9::appstream\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"osbuild-composer","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 9\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"osbuild-composer\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:132-1.el9\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:9::appstream\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"git-lfs","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 9\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"git-lfs\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:3.6.1-1.el9\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:9::appstream\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"butane","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"butane\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:0.17.0-1.el9_2.1\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:rhel_e4s:9.2::appstream\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"grafana-pcp","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 9.4 Extended Update Support\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"grafana-pcp\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:5.1.1-4.el9_4\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:rhel_eus:9.4::appstream\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"butane","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"butane\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:0.23.0-1.el9_6.1\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:rhel_eus:9.6::appstream\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"foreman_ygg_worker","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Satellite Client 6 for RHEL 10\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"foreman_ygg_worker\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:0.3.1-1.el10sat\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:rhel_satellite_client:6::el10\",\n \"cpe:/a:redhat:rhel_satellite_client:6::el8\",\n \"cpe:/a:redhat:rhel_satellite_client:6::el9\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"foreman_ygg_worker","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Satellite Client 6 for RHEL 8\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"foreman_ygg_worker\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:0.3.1-1.el8sat\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:rhel_satellite_client:6::el10\",\n \"cpe:/a:redhat:rhel_satellite_client:6::el8\",\n \"cpe:/a:redhat:rhel_satellite_client:6::el9\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"foreman_ygg_worker","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Satellite Client 6 for RHEL 9\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"foreman_ygg_worker\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:0.3.1-1.el9sat\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:rhel_satellite_client:6::el10\",\n \"cpe:/a:redhat:rhel_satellite_client:6::el8\",\n \"cpe:/a:redhat:rhel_satellite_client:6::el9\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"golang-github-danielqsj-kafka_exporter","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Streams for Apache Kafka 2.9.0\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"defaultStatus\": \"unaffected\",\n \"packageName\": \"golang-github-danielqsj-kafka_exporter\",\n \"cpes\": [\n \"cpe:/a:redhat:amq_streams:2\"\n ]\n }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"rhtas/fulcio-rhel9","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Trusted Artifact Signer 1.3\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"rhtas/fulcio-rhel9\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1787305413\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"\n ]\n }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"tang-operator-bundle-container","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"NBDE Tang Server\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"tang-operator-bundle-container\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:network_bound_disk_encryption_tang:1\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"helm","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"OpenShift Developer Tools and Services\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"helm\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:ocp_tools\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"odo","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"OpenShift Developer Tools and Services\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"odo\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:ocp_tools\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"openshift-pipelines-client","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"OpenShift Pipelines\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"openshift-pipelines-client\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:openshift_pipelines:1\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"openshift-serverless-clients","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"OpenShift Serverless\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"openshift-serverless-clients\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:serverless:1\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"helm","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Ansible Automation Platform 1.2\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"helm\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:ansible_automation_platform\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"openshift-clients","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Ansible Automation Platform 1.2\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"openshift-clients\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:ansible_automation_platform\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"automation-gateway-proxy","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Ansible Automation Platform 2\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"automation-gateway-proxy\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:ansible_automation_platform:2\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"receptor","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Ansible Automation Platform 2\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"receptor\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:ansible_automation_platform:2\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"buildah","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 10\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"buildah\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:10\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"butane","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 10\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"butane\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:10\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"conmon","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 10\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"conmon\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:10\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"containers-common","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 10\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"containers-common\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:10\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"delve","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 10\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"delve\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:10\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"git-lfs","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 10\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"git-lfs\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:10\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"golang-github-openprinting-ipp-usb","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 10\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"golang-github-openprinting-ipp-usb\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:10\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"grafana","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 10\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"grafana\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:10\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"grafana-pcp","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 10\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"grafana-pcp\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:10\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"gvisor-tap-vsock","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 10\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"gvisor-tap-vsock\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:10\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"ignition","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 10\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"ignition\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:10\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"osbuild-composer","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 10\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"osbuild-composer\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:10\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"podman","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 10\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"podman\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:10\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"rsyslog","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 10\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"rsyslog\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:10\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"skopeo","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 10\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"skopeo\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:10\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"toolbox","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 10\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"toolbox\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:10\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"yggdrasil","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 10\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"yggdrasil\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:10\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"yggdrasil-worker-package-manager","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 10\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"yggdrasil-worker-package-manager\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:10\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"host-metering","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 7\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"host-metering\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/o:redhat:rhel_els:7\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"skopeo","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 7\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"skopeo\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/o:redhat:rhel_els:7\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"container-tools:rhel8/buildah","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 8\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"container-tools:rhel8/buildah\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:8\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"container-tools:rhel8/conmon","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 8\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"container-tools:rhel8/conmon\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:8\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"container-tools:rhel8/containernetworking-plugins","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 8\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"container-tools:rhel8/containernetworking-plugins\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:8\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"container-tools:rhel8/podman","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 8\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"container-tools:rhel8/podman\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:8\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"container-tools:rhel8/runc","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 8\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"container-tools:rhel8/runc\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:8\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"container-tools:rhel8/skopeo","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 8\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"container-tools:rhel8/skopeo\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:8\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"container-tools:rhel8/toolbox","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 8\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"container-tools:rhel8/toolbox\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:8\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"git-lfs","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 8\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"git-lfs\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:8\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"rhc","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 8\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"rhc\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:8\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"rsyslog","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 8\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"rsyslog\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:8\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"weldr-client","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 8\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"weldr-client\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:8\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"buildah","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 9\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"buildah\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:9\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"butane","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 9\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"butane\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:9\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"conmon","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 9\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"conmon\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:9\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"containernetworking-plugins","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 9\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"containernetworking-plugins\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:9\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"grafana-pcp","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 9\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"grafana-pcp\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:9\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"gvisor-tap-vsock","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 9\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"gvisor-tap-vsock\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:9\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"ignition","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 9\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"ignition\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:9\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"opentelemetry-collector","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 9\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"opentelemetry-collector\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:9\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"podman","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 9\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"podman\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:9\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"rsyslog","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 9\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"rsyslog\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:9\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"runc","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 9\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"runc\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:9\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"skopeo","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 9\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"skopeo\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:9\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"toolbox","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 9\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"toolbox\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:9\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"weldr-client","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Enterprise Linux 9\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"weldr-client\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:enterprise_linux:9\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"buildah","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift Container Platform 4\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"buildah\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:openshift:4\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"butane","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift Container Platform 4\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"butane\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:openshift:4\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"conmon","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift Container Platform 4\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"conmon\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:openshift:4\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"conmon-rs","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift Container Platform 4\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"conmon-rs\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:openshift:4\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"containernetworking-plugins","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift Container Platform 4\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"containernetworking-plugins\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:openshift:4\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"cri-o","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift Container Platform 4\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"cri-o\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:openshift:4\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"cri-tools","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift Container Platform 4\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"cri-tools\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:openshift:4\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"golang-github-prometheus-promu","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift Container Platform 4\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"golang-github-prometheus-promu\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:openshift:4\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"ignition","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift Container Platform 4\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"ignition\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:openshift:4\"\n ]\n }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"lifecycle-agent-operator-bundle-container","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift Container Platform 4\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"lifecycle-agent-operator-bundle-container\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:openshift:4\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"microshift","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift Container Platform 4\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"microshift\",\n \"defaultStatus\": \"unknown\",\n \"cpes\": [\n \"cpe:/a:redhat:openshift:4\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"openshift","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift Container Platform 4\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"openshift\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:openshift:4\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"openshift4/bare-metal-event-relay-operator-bundle","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift Container Platform 4\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"openshift4/bare-metal-event-relay-operator-bundle\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:openshift:4\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"openshift4/numaresources-operator-bundle","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift Container Platform 4\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"openshift4/numaresources-operator-bundle\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:openshift:4\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"openshift4/ose-aws-efs-csi-driver-container-rhel8","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift Container Platform 4\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"openshift4/ose-aws-efs-csi-driver-container-rhel8\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:openshift:4\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"openshift4/ose-gcp-filestore-csi-driver-rhel9","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift Container Platform 4\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"openshift4/ose-gcp-filestore-csi-driver-rhel9\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:openshift:4\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"openshift4/ose-secrets-store-csi-driver-rhel9","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift Container Platform 4\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"openshift4/ose-secrets-store-csi-driver-rhel9\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:openshift:4\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"openshift4/ose-sriov-network-metrics-exporter-rhel9","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift Container Platform 4\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"openshift4/ose-sriov-network-metrics-exporter-rhel9\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:openshift:4\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"openshift4/ose-sriov-rdma-cni-rhel9","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift Container Platform 4\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"openshift4/ose-sriov-rdma-cni-rhel9\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:openshift:4\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"openshift4/ose-vertical-pod-autoscaler-rhel8","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift Container Platform 4\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"openshift4/ose-vertical-pod-autoscaler-rhel8\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:openshift:4\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"openshift4/sriov-network-metrics-exporter-rhel9","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift Container Platform 4\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"openshift4/sriov-network-metrics-exporter-rhel9\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:openshift:4\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"openshift4/topology-aware-lifecycle-manager-operator-bundle","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift Container Platform 4\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"openshift4/topology-aware-lifecycle-manager-operator-bundle\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:openshift:4\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"openshift-clients","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift Container Platform 4\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"openshift-clients\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:openshift:4\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"ose-aws-ecr-image-credential-provider","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift Container Platform 4\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"ose-aws-ecr-image-credential-provider\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:openshift:4\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"ose-azure-acr-image-credential-provider","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift Container Platform 4\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"ose-azure-acr-image-credential-provider\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:openshift:4\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"ose-gcp-gcr-image-credential-provider","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift Container Platform 4\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"ose-gcp-gcr-image-credential-provider\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:openshift:4\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"podman","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift Container Platform 4\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"podman\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:openshift:4\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"runc","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift Container Platform 4\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"runc\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:openshift:4\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"skopeo","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift Container Platform 4\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"skopeo\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:openshift:4\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"mcg","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Openshift Container Storage 4\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"mcg\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:openshift_container_storage:4\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"mcg","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Openshift Data Foundation 4\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"mcg\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:openshift_data_foundation:4\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"devspaces/machineexec-rhel8","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift Dev Spaces\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"devspaces/machineexec-rhel8\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:openshift_devspaces:3\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"openshift-gitops-1/gitops-operator-bundle","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift GitOps\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"openshift-gitops-1/gitops-operator-bundle\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:openshift_gitops:1\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"rosa","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift on AWS\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"rosa\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:openshift_service_on_aws:1\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"kubevirt","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenShift Virtualization 4\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"kubevirt\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:container_native_virtualization:4\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"etcd","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenStack Platform 16.2\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"etcd\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:openstack:16.2\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"golang-github-infrawatch-apputils","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenStack Platform 16.2\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"golang-github-infrawatch-apputils\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:openstack:16.2\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"golang-qpid-apache","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenStack Platform 16.2\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"golang-qpid-apache\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:openstack:16.2\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"qpid-proton","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenStack Platform 16.2\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"qpid-proton\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:openstack:16.2\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"etcd","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenStack Platform 17.1\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"etcd\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:openstack:17.1\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"golang-github-infrawatch-apputils","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenStack Platform 17.1\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"golang-github-infrawatch-apputils\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:openstack:17.1\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"golang-qpid-apache","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenStack Platform 17.1\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"golang-qpid-apache\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:openstack:17.1\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"qpid-proton","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat OpenStack Platform 17.1\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"qpid-proton\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:openstack:17.1\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"qpid-proton","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Satellite 6\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"qpid-proton\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:satellite:6\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"satellite-capsule:el8/qpid-proton","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Satellite 6\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"satellite-capsule:el8/qpid-proton\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:satellite:6\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"satellite:el8/qpid-proton","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Satellite 6\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"satellite:el8/qpid-proton\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:satellite:6\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"satellite:el8/yggdrasil-worker-forwarder","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Satellite 6\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"satellite:el8/yggdrasil-worker-forwarder\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:satellite:6\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"yggdrasil","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Satellite 6\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"yggdrasil\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:satellite:6\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"yggdrasil-worker-forwarder","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Satellite 6\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"yggdrasil-worker-forwarder\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:satellite:6\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"qpid-proton","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Service Interconnect 1\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"qpid-proton\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:service_interconnect:1\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"skupper-cli","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Service Interconnect 1\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"skupper-cli\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:service_interconnect:1\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"skupper-router","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Service Interconnect 1\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"skupper-router\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:service_interconnect:1\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"heketi","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Storage 3\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"heketi\",\n \"defaultStatus\": \"affected\",\n \"cpes\": [\n \"cpe:/a:redhat:storage:3\"\n ]\n }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L","score":6.5,"severity":"MEDIUM"}],"references":["https://access.redhat.com/errata/RHSA-2024:10133","https://access.redhat.com/errata/RHSA-2024:7502","https://access.redhat.com/errata/RHSA-2024:7550","https://access.redhat.com/errata/RHSA-2024:8327","https://access.redhat.com/errata/RHSA-2024:8678","https://access.redhat.com/errata/RHSA-2024:8847","https://access.redhat.com/errata/RHSA-2024:9551","https://access.redhat.com/errata/RHSA-2025:2416","https://access.redhat.com/errata/RHSA-2025:7118","https://access.redhat.com/errata/RHSA-2025:7256","https://access.redhat.com/errata/RHSA-2025:7624","https://access.redhat.com/errata/RHSA-2026:55520","https://access.redhat.com/errata/RHSA-2026:55525","https://access.redhat.com/errata/RHSA-2026:59439","https://access.redhat.com/errata/RHSA-2026:66016","https://access.redhat.com/errata/RHSA-2026:68504","https://access.redhat.com/errata/RHSA-2026:69235","https://access.redhat.com/errata/RHSA-2026:90725","https://access.redhat.com/errata/RHSA-2026:90726","https://access.redhat.com/errata/RHSA-2026:92217","https://access.redhat.com/security/cve/CVE-2024-9355","https://bugzilla.redhat.com/show_bug.cgi?id=2315719","https://github.com/golang-fips/openssl/pull/198"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-9355","license":"CVE Program Terms of Use","key":"cve-program:CVE-2024-9355","identifiers":["CVE-2024-9355"]},"retained":false,"historicalAffected":[]},{"revision":"5ad1337130644d249b496258df2d1245","observedAt":"2026-11-11T02:39:54.303+00:00","statement":{"source":"euvd","id":"EUVD-2024-2916","aliases":["CVE-2024-9355","GHSA-3h3x-2hwv-hr52"],"title":"A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positiv…","description":"A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted computed hmac sum to an untrusted input sum if an attacker can send a zeroed buffer in place of a pre-computed sum.\u00A0 It is also possible to force a derived key to be all zeros instead of an unpredictable value.\u00A0 This may have follow-on implications for the Go TLS stack.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L","score":6.5,"severity":null}],"references":["https://access.redhat.com/errata/RHSA-2024:10133","https://access.redhat.com/errata/RHSA-2024:7502","https://access.redhat.com/errata/RHSA-2024:7550","https://access.redhat.com/errata/RHSA-2024:8327","https://access.redhat.com/errata/RHSA-2024:8678","https://access.redhat.com/errata/RHSA-2024:8847","https://access.redhat.com/errata/RHSA-2024:9551","https://access.redhat.com/errata/RHSA-2025:2416","https://access.redhat.com/errata/RHSA-2025:7118","https://access.redhat.com/errata/RHSA-2025:7256","https://access.redhat.com/errata/RHSA-2025:7624","https://access.redhat.com/errata/RHSA-2026:55520","https://access.redhat.com/errata/RHSA-2026:55525","https://access.redhat.com/errata/RHSA-2026:59439","https://access.redhat.com/errata/RHSA-2026:66016","https://access.redhat.com/errata/RHSA-2026:68504","https://access.redhat.com/errata/RHSA-2026:69235","https://access.redhat.com/errata/RHSA-2026:90725","https://access.redhat.com/errata/RHSA-2026:90726","https://access.redhat.com/errata/RHSA-2026:92217","https://access.redhat.com/security/cve/CVE-2024-9355","https://bugzilla.redhat.com/show_bug.cgi?id=2315719","https://github.com/golang-fips/openssl/pull/198"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-2916","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Oct 1, 2024, 6:17:29 PM","dateUpdated":"Nov 10, 2026, 5:49:15 PM"},"relatedAdvisories":[{"id":"SUSE-SU-2024:3911-1","title":"Security update for govulncheck-vulndb","vulnerabilityIds":["CVE-2022-45157","CVE-2023-22644","CVE-2023-32197","CVE-2024-10214","CVE-2024-10241","CVE-2024-22030","CVE-2024-22036","CVE-2024-33662","CVE-2024-36814","CVE-2024-38365","CVE-2024-39223","CVE-2024-47003","CVE-2024-47067","CVE-2024-47182","CVE-2024-47534","CVE-2024-47616","CVE-2024-47825","CVE-2024-47827","CVE-2024-47832","CVE-2024-47877","CVE-2024-48909","CVE-2024-48921","CVE-2024-49380","CVE-2024-49381","CVE-2024-49753","CVE-2024-49757","CVE-2024-50312","CVE-2024-7558","CVE-2024-7594","CVE-2024-8037","CVE-2024-8038","CVE-2024-8901","CVE-2024-8975","CVE-2024-8996","CVE-2024-9180","CVE-2024-9264","CVE-2024-9312","CVE-2024-9313","CVE-2024-9341","CVE-2024-9355","CVE-2024-9407","CVE-2024-9486","CVE-2024-9594","CVE-2024-9675"]},{"id":"RHSA-2026:68504","title":"Red Hat Security Advisory: osbuild-composer security update","vulnerabilityIds":["CVE-2024-9355","CVE-2024-45336","CVE-2025-22866","CVE-2025-68121","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-33810","CVE-2026-33818","CVE-2026-39820","CVE-2026-39821","CVE-2026-42499","CVE-2026-42504","CVE-2026-56853","CVE-2026-56858","CVE-2026-56859","CVE-2026-56860","CVE-2026-56862"]},{"id":"RHSA-2026:92217","title":"Red Hat Security Advisory: rhc security update","vulnerabilityIds":["CVE-2024-9355","CVE-2024-45336","CVE-2025-68121","CVE-2026-27145","CVE-2026-32280","CVE-2026-32282","CVE-2026-32283","CVE-2026-33811","CVE-2026-33818","CVE-2026-39821","CVE-2026-42504","CVE-2026-56858","CVE-2026-56860","CVE-2026-56862","CVE-2026-78667","CVE-2026-78669","CVE-2026-97031","CVE-2026-111943"]},{"id":"RHSA-2024:8678","title":"Red Hat Security Advisory: grafana security update","vulnerabilityIds":["CVE-2024-9355","CVE-2024-47875"]},{"id":"RHSA-2026:69235","title":"Red Hat Security Advisory: osbuild-composer security update","vulnerabilityIds":["CVE-2024-9355","CVE-2024-45336","CVE-2025-22866","CVE-2025-68121","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-33810","CVE-2026-33818","CVE-2026-39821","CVE-2026-42504","CVE-2026-56853","CVE-2026-56858","CVE-2026-56859","CVE-2026-56860","CVE-2026-56862"]},{"id":"RHSA-2025:2416","title":"Red Hat Security Advisory: Streams for Apache Kafka 2.9.0 release and security update","vulnerabilityIds":["CVE-2023-52428","CVE-2024-8184","CVE-2024-9355","CVE-2024-24791","CVE-2024-31141","CVE-2024-47535","CVE-2024-47554"]},{"id":"RHSA-2026:59439","title":"Red Hat Security Advisory: RHTAS 1.3.7 - Red Hat Trusted Artifact Signer Release","vulnerabilityIds":["CVE-2024-9355","CVE-2025-7783","CVE-2025-47907","CVE-2026-48702","CVE-2026-59869"]},{"id":"RHSA-2025:7256","title":"Red Hat Security Advisory: git-lfs security update","vulnerabilityIds":["CVE-2023-39321","CVE-2023-39322","CVE-2024-9355","CVE-2024-24788","CVE-2024-24790","CVE-2024-24791"]},{"id":"RHSA-2025:7624","title":"Red Hat Security Advisory: Satellite 6 Client Bug Fix Update","vulnerabilityIds":["CVE-2024-9355","CVE-2024-45336"]},{"id":"RHSA-2024:9551","title":"Red Hat Security Advisory: grafana-pcp security update","vulnerabilityIds":["CVE-2024-9355"]},{"id":"msrc_CVE-2024-9355","title":"Golang-fips: golang fips zeroed buffer","vulnerabilityIds":["CVE-2024-9355"]},{"id":"RHSA-2026:55520","title":"Red Hat Security Advisory: butane security update","vulnerabilityIds":["CVE-2024-9355"]},{"id":"RHSA-2026:90726","title":"Red Hat Security Advisory: rhc security update","vulnerabilityIds":["CVE-2024-9355","CVE-2024-45336","CVE-2025-68121","CVE-2026-27145","CVE-2026-32280","CVE-2026-32282","CVE-2026-32283","CVE-2026-33811","CVE-2026-33818","CVE-2026-39821","CVE-2026-42504","CVE-2026-56858","CVE-2026-56860","CVE-2026-56862","CVE-2026-78667","CVE-2026-78669","CVE-2026-97031","CVE-2026-111943"]},{"id":"RHSA-2026:90725","title":"Red Hat Security Advisory: rhc security update","vulnerabilityIds":["CVE-2024-9355","CVE-2024-45336","CVE-2025-68121","CVE-2026-27145","CVE-2026-32280","CVE-2026-32282","CVE-2026-32283","CVE-2026-33811","CVE-2026-33818","CVE-2026-39821","CVE-2026-42504","CVE-2026-56858","CVE-2026-56860","CVE-2026-56862","CVE-2026-78667","CVE-2026-78669","CVE-2026-97031","CVE-2026-111943"]},{"id":"RHSA-2024:10133","title":"Red Hat Security Advisory: rhc-worker-script security update","vulnerabilityIds":["CVE-2024-9355","CVE-2024-24791"]},{"id":"openSUSE-SU-2024:14447-1","title":"govulncheck-vulndb-0.0.20241030T212825-1.1 on GA media","vulnerabilityIds":["CVE-2022-45157","CVE-2023-22644","CVE-2023-32197","CVE-2024-10214","CVE-2024-10241","CVE-2024-22030","CVE-2024-22036","CVE-2024-33662","CVE-2024-36814","CVE-2024-38365","CVE-2024-39223","CVE-2024-47003","CVE-2024-47067","CVE-2024-47182","CVE-2024-47534","CVE-2024-47616","CVE-2024-47825","CVE-2024-47827","CVE-2024-47832","CVE-2024-47877","CVE-2024-48909","CVE-2024-48921","CVE-2024-49380","CVE-2024-49381","CVE-2024-49753","CVE-2024-49757","CVE-2024-50312","CVE-2024-7558","CVE-2024-7594","CVE-2024-8037","CVE-2024-8038","CVE-2024-8901","CVE-2024-8975","CVE-2024-8996","CVE-2024-9180","CVE-2024-9264","CVE-2024-9312","CVE-2024-9313","CVE-2024-9341","CVE-2024-9355","CVE-2024-9407","CVE-2024-9486","CVE-2024-9594","CVE-2024-9675"]},{"id":"RHSA-2026:66016","title":"Red Hat Security Advisory: osbuild-composer security update","vulnerabilityIds":["CVE-2024-9355","CVE-2024-45336","CVE-2026-33818","CVE-2026-39820","CVE-2026-39821","CVE-2026-56853","CVE-2026-56858","CVE-2026-56859","CVE-2026-56860","CVE-2026-56862"]},{"id":"WID-SEC-W-2024-3075","title":"Golang Go \"FIPS OpenSSL\": Schwachstelle ermöglicht nicht spezifizierten Angriff","vulnerabilityIds":["CVE-2024-9355"]},{"id":"RHSA-2024:8847","title":"Red Hat Security Advisory: grafana-pcp security update","vulnerabilityIds":["CVE-2024-9355"]},{"id":"openSUSE-SU-2024:0350-1","title":"Security update for govulncheck-vulndb","vulnerabilityIds":["CVE-2022-45157","CVE-2023-22644","CVE-2023-32197","CVE-2024-0132","CVE-2024-0133","CVE-2024-10005","CVE-2024-10006","CVE-2024-10086","CVE-2024-10214","CVE-2024-10241","CVE-2024-10452","CVE-2024-22030","CVE-2024-22036","CVE-2024-33662","CVE-2024-36814","CVE-2024-38365","CVE-2024-39223","CVE-2024-39720","CVE-2024-46872","CVE-2024-47003","CVE-2024-47067","CVE-2024-47182","CVE-2024-47401","CVE-2024-47534","CVE-2024-47616","CVE-2024-47825","CVE-2024-47827","CVE-2024-47832","CVE-2024-47877","CVE-2024-48909","CVE-2024-48921","CVE-2024-49380","CVE-2024-49381","CVE-2024-49753","CVE-2024-49757","CVE-2024-50052","CVE-2024-50312","CVE-2024-50354","CVE-2024-7558","CVE-2024-7594","CVE-2024-8037","CVE-2024-8038","CVE-2024-8185","CVE-2024-8901","CVE-2024-8975","CVE-2024-8996","CVE-2024-9180","CVE-2024-9264","CVE-2024-9312","CVE-2024-9313","CVE-2024-9341","CVE-2024-9355","CVE-2024-9407","CVE-2024-9486","CVE-2024-9594","CVE-2024-9675"]},{"id":"RHSA-2025:7118","title":"Red Hat Security Advisory: osbuild and osbuild-composer security update","vulnerabilityIds":["CVE-2024-1394","CVE-2024-9355","CVE-2024-34158"]},{"id":"RHSA-2024:7550","title":"Red Hat Security Advisory: golang security update","vulnerabilityIds":["CVE-2024-9355"]},{"id":"RHSA-2026:55525","title":"Red Hat Security Advisory: butane security update","vulnerabilityIds":["CVE-2024-9355"]},{"id":"RHSA-2024:8327","title":"Red Hat Security Advisory: grafana security update","vulnerabilityIds":["CVE-2024-9355","CVE-2024-47875"]},{"id":"RHSA-2024:7502","title":"Red Hat Security Advisory: go-toolset:rhel8 security update","vulnerabilityIds":["CVE-2024-9355"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2024-2916","identifiers":["EUVD-2024-2916","CVE-2024-9355","GHSA-3h3x-2hwv-hr52"]},"retained":false,"historicalAffected":[]},{"revision":"2ba25ae578a449508a30723ed6f63a52","observedAt":"2026-11-12T07:55:26.083+00:00","statement":{"source":"nvd","id":"CVE-2024-9355","aliases":[],"title":"A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positiv…","description":"A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted computed hmac sum to an untrusted input sum if an attacker can send a zeroed buffer in place of a pre-computed sum.\u00A0 It is also possible to force a derived key to be all zeros instead of an unpredictable value.\u00A0 This may have follow-on implications for the Go TLS stack.","state":0,"publishedAt":"2024-10-01T19:15:09.793+00:00","modifiedAt":"2026-11-10T18:17:15.717+00:00","affected":[],"metrics":[{"system":"CVSS 3.1 · secalert@redhat.com · Secondary","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L","score":6.5,"severity":"MEDIUM"}],"references":["https://access.redhat.com/errata/RHSA-2024:10133","https://access.redhat.com/errata/RHSA-2024:7502","https://access.redhat.com/errata/RHSA-2024:7550","https://access.redhat.com/errata/RHSA-2024:8327","https://access.redhat.com/errata/RHSA-2024:8678","https://access.redhat.com/errata/RHSA-2024:8847","https://access.redhat.com/errata/RHSA-2024:9551","https://access.redhat.com/errata/RHSA-2025:2416","https://access.redhat.com/errata/RHSA-2025:7118","https://access.redhat.com/errata/RHSA-2025:7256","https://access.redhat.com/errata/RHSA-2025:7624","https://access.redhat.com/errata/RHSA-2026:55520","https://access.redhat.com/errata/RHSA-2026:55525","https://access.redhat.com/errata/RHSA-2026:59439","https://access.redhat.com/errata/RHSA-2026:66016","https://access.redhat.com/errata/RHSA-2026:68504","https://access.redhat.com/errata/RHSA-2026:69235","https://access.redhat.com/errata/RHSA-2026:90725","https://access.redhat.com/errata/RHSA-2026:90726","https://access.redhat.com/errata/RHSA-2026:92217","https://access.redhat.com/security/cve/CVE-2024-9355","https://bugzilla.redhat.com/show_bug.cgi?id=2315719","https://github.com/golang-fips/openssl/pull/198"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-9355","license":"NIST NVD usage terms; underlying source attribution retained","enrichment":{"sourceStatus":"Deferred","weaknesses":["CWE-457"],"productCriteria":[],"sourceDates":{"published":"2024-10-01T19:15:09.793","lastModified":"2026-11-10T18:17:15.717"},"relatedAdvisories":[],"note":"NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON."},"key":"nvd:CVE-2024-9355","identifiers":["CVE-2024-9355"]},"retained":false,"historicalAffected":[]},{"revision":"e94f0a8573bb48a2b7873ac6e1a9b3f8","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GHSA-3h3x-2hwv-hr52","aliases":["CVE-2024-9355","GO-2024-3167"],"title":"Golang FIPS OpenSSL has a Use of Uninitialized Variable vulnerability","description":"A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted computed hmac sum to an untrusted input sum if an attacker can send a zeroed buffer in place of a pre-computed sum.\u00A0 It is also possible to force a derived key to be all zeros instead of an unpredictable value.\u00A0 This may have follow-on implications for the Go TLS stack.","state":0,"publishedAt":"2024-10-01T21:31:34+00:00","modifiedAt":"2026-09-21T18:45:04.7005975+00:00","affected":[{"ecosystem":"Go","name":"github.com/golang-fips/openssl","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"last_affected","version":"2.0.3"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[{"system":"CVSS_V3","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L","score":null,"severity":null},{"system":"CVSS_V4","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N","score":null,"severity":null},{"system":"Publisher rating","vector":null,"score":null,"severity":"HIGH"}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2024-9355","https://github.com/golang-fips/openssl/pull/198","https://github.com/github/advisory-database/pull/4950","https://pkg.go.dev/vuln/GO-2024-3167","https://github.com/golang-fips/openssl","https://bugzilla.redhat.com/show_bug.cgi?id=2315719","https://access.redhat.com/security/cve/CVE-2024-9355","https://access.redhat.com/errata/RHSA-2026:69235","https://access.redhat.com/errata/RHSA-2026:68504","https://access.redhat.com/errata/RHSA-2026:66016","https://access.redhat.com/errata/RHSA-2026:59439","https://access.redhat.com/errata/RHSA-2026:55525","https://access.redhat.com/errata/RHSA-2026:55520","https://access.redhat.com/errata/RHSA-2025:7624","https://access.redhat.com/errata/RHSA-2025:7256","https://access.redhat.com/errata/RHSA-2025:7118","https://access.redhat.com/errata/RHSA-2025:2416","https://access.redhat.com/errata/RHSA-2024:9551","https://access.redhat.com/errata/RHSA-2024:8847","https://access.redhat.com/errata/RHSA-2024:8678","https://access.redhat.com/errata/RHSA-2024:8327","https://access.redhat.com/errata/RHSA-2024:7550","https://access.redhat.com/errata/RHSA-2024:7502","https://access.redhat.com/errata/RHSA-2024:10133"],"sourceUrl":"https://github.com/advisories/GHSA-3h3x-2hwv-hr52","license":"GitHub Advisory Database · CC-BY-4.0","key":"osv:GHSA-3h3x-2hwv-hr52","identifiers":["GHSA-3h3x-2hwv-hr52","CVE-2024-9355","GO-2024-3167"]},"retained":false,"historicalAffected":[]},{"revision":"6b88c8e6a7564fc28c5ecbfd12410eb2","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2024-3167","aliases":["CVE-2024-9355","GHSA-3h3x-2hwv-hr52"],"title":"Golang FIPS OpenSSL has a Use of Uninitialized Variable vulnerability in github.com/golang-fips/openssl","description":"A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted computed hmac sum to an untrusted input sum if an attacker can send a zeroed buffer in place of a pre-computed sum. It is also possible to force a derived key to be all zeros instead of an unpredictable value. This may have follow-on implications for the Go TLS stack.","state":0,"publishedAt":"2024-10-09T20:29:23+00:00","modifiedAt":"2026-03-03T04:55:50.086919+00:00","affected":[{"ecosystem":"Go","name":"github.com/golang-fips/openssl","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/advisories/GHSA-3h3x-2hwv-hr52","https://github.com/golang-fips/openssl/pull/198","https://github.com/github/advisory-database/pull/4950"],"sourceUrl":"https://osv.dev/vulnerability/GO-2024-3167","license":"OSV · upstream source license applies","key":"osv:GO-2024-3167","identifiers":["GO-2024-3167","CVE-2024-9355","GHSA-3h3x-2hwv-hr52"]},"retained":false,"historicalAffected":[]}],"coverage":[{"source":"cisa-kev:global","scope":"Complete CISA KEV catalog; all vendors. Missing entries do not establish absence of exploitation.","generation":"2026-11-12T19:18:40.2432846+00:00","complete":true,"records":1779,"lastAttemptAt":"2026-11-12T19:18:40.2432846+00:00","lastSuccessAt":"2026-11-12T19:18:40.4588707+00:00","error":null,"lastVerifiedAt":"2026-11-12T19:18:40.458871+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"cve-program","scope":"Official CVE Program baseline and cumulative hourly delta; all vendors, published and rejected records","generation":"cve-64752486c567b55b31fb0d7225f5222bcd0019564ac0ac5f0649e242c7b19299-71a71be06903c0321f16f785da414a43cf171b11fafd14dad0e93850c58a221f","complete":true,"records":424812,"lastAttemptAt":"2026-11-12T19:16:36.4552812+00:00","lastSuccessAt":"2026-11-12T19:16:36.099661+00:00","error":null,"lastVerifiedAt":"2026-11-12T19:16:36.4552812+00:00","snapshotPublishedAt":"2026-11-12T18:25:07+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"euvd","scope":"Rolling EUVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global EUVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-92f81c09e13d462186b63ad6d42bf56c","complete":true,"records":13775,"lastAttemptAt":"2026-11-12T19:19:06.4872466+00:00","lastSuccessAt":"2026-11-12T19:19:06.482+00:00","error":null,"lastVerifiedAt":"2026-11-12T19:19:06.482+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13828,"expectedIdentifiers":13828,"failedIdentifiers":0},{"source":"first-epss:nuget","scope":"FIRST EPSS for explicit CVE aliases in the collected public NuGet archive. Not a global EPSS backfill.","generation":"2026-11-12T19:18:40.2432846+00:00","complete":true,"records":1123,"lastAttemptAt":"2026-11-12T19:18:40.2432846+00:00","lastSuccessAt":"2026-11-12T19:18:40.459652+00:00","error":null,"lastVerifiedAt":"2026-11-12T19:18:40.4596522+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"nvd","scope":"Rolling NVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global NVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-5542c4cfe5304160aa85412ba73639c8","complete":true,"records":13775,"lastAttemptAt":"2026-11-12T19:19:05.6096222+00:00","lastSuccessAt":"2026-11-12T19:19:05.605+00:00","error":null,"lastVerifiedAt":"2026-11-12T19:19:05.605+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13828,"expectedIdentifiers":13828,"failedIdentifiers":0},{"source":"osv:Go","scope":"Complete OSV Go ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"go-0a16b7a0ad9e3cbe2c8193b3ff308e03491784410561da4c005974a7742a693a","complete":true,"records":9947,"lastAttemptAt":"2026-11-12T19:18:40.1037842+00:00","lastSuccessAt":"2026-11-12T19:18:39.7950995+00:00","error":null,"lastVerifiedAt":"2026-11-12T19:18:40.1037842+00:00","snapshotPublishedAt":"2026-11-12T18:33:08+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:NuGet","scope":"Complete OSV NuGet ecosystem archive, including GitHub Advisory Database records; NuGet version matching only","generation":"nuget-4d60731753a2f72e455d1086e7203d0ef10843936dcc1cf2b45135e2caa204b0","complete":true,"records":2012,"lastAttemptAt":"2026-11-12T19:16:36.615069+00:00","lastSuccessAt":"2026-11-12T18:16:50.7862525+00:00","error":null,"lastVerifiedAt":"2026-11-12T19:16:36.615069+00:00","snapshotPublishedAt":"2026-11-12T17:48:11+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:crates.io","scope":"Complete OSV crates.io ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"crates.io-0d57668ba92a2918d0664e89ea91d467f8e6a2bc6330923eb883b74ac42a14ec","complete":true,"records":3125,"lastAttemptAt":"2026-11-12T19:18:40.2048041+00:00","lastSuccessAt":"2026-11-12T15:18:36.6112732+00:00","error":null,"lastVerifiedAt":"2026-11-12T19:18:40.2048041+00:00","snapshotPublishedAt":"2026-11-12T14:48:37+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:npm","scope":"Complete OSV npm ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"npm-558c98a923b6de17949b5b6cab024e22e2f0e3b948d91b9ed9bca029f7b91e19","complete":true,"records":231722,"lastAttemptAt":"2026-11-12T19:18:30.8566334+00:00","lastSuccessAt":"2026-11-12T19:18:29.2862915+00:00","error":null,"lastVerifiedAt":"2026-11-12T19:18:30.8566334+00:00","snapshotPublishedAt":"2026-11-12T18:33:13+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null}]}