CVE-2024-45341

EUVD-2024-41742
A certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate chain. Certificates containing URIs are not permitted in the web PKI, so this only affects users of private PKIs which make use of URIs.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.1 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CISA-ADPADP
6.1 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 30%
Debian logo
Debian Releases
Debian Product
Codename
golang-1.15
bookworm
no-dsa
bullseye
vulnerable
golang-1.19
bookworm
vulnerable
bullseye
postponed
golang-1.24
bookworm
no-dsa
bullseye
postponed
forky
1.24.9-1
fixed
sid
1.24.9-1
fixed
trixie
1.24.4-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
lxd
bionic
needs-triage
focal
not-affected
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
trusty
dne
xenial
needs-triage
golang
focal
dne
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
golang-1.6
focal
dne
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
xenial
needs-triage
golang-1.8
bionic
needs-triage
focal
dne
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
golang-1.9
bionic
needs-triage
focal
dne
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
golang-1.10
bionic
needs-triage
focal
dne
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
trusty
needs-triage
xenial
needs-triage
golang-1.13
bionic
needs-triage
focal
needs-triage
jammy
needs-triage
noble
dne
oracular
dne
plucky
dne
questing
dne
xenial
needs-triage
golang-1.14
focal
needs-triage
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
golang-1.16
bionic
needs-triage
focal
needs-triage
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
golang-1.17
focal
dne
jammy
needs-triage
noble
dne
oracular
dne
plucky
dne
questing
dne
golang-1.18
bionic
needs-triage
focal
needs-triage
jammy
needs-triage
noble
dne
oracular
dne
plucky
dne
questing
dne
xenial
needs-triage
golang-1.20
focal
needs-triage
jammy
needs-triage
noble
dne
oracular
dne
plucky
dne
questing
dne
golang-1.21
focal
needs-triage
jammy
needs-triage
noble
needs-triage
oracular
dne
plucky
dne
questing
dne
golang-1.22
focal
needs-triage
jammy
Fixed 1.22.2-2~22.04.3
released
noble
Fixed 1.22.2-2ubuntu0.4
released
oracular
Fixed 1.22.8-1ubuntu0.1
released
plucky
dne
questing
dne
golang-1.23
focal
dne
jammy
needs-triage
noble
needs-triage
oracular
ignored
plucky
not-affected
questing
not-affected
golang-1.24
focal
dne
jammy
dne
noble
dne
oracular
dne
plucky
needs-triage
questing
needs-triage
golang-go.crypto
bionic
needs-triage
focal
needs-triage
jammy
needs-triage
noble
needs-triage
oracular
ignored
plucky
needs-triage
questing
needs-triage
trusty
dne
xenial
needs-triage
snapd
bionic
not-affected
focal
not-affected
jammy
not-affected
noble
not-affected
oracular
ignored
plucky
not-affected
questing
not-affected
trusty
dne
xenial
not-affected
References
https://go.dev/cl/643099
https://go.dev/issue/71156
https://groups.google.com/g/golang-dev/c/CAWXhan3Jww/m/bk9LAa-lCgAJ
https://groups.google.com/g/golang-dev/c/bG8cv1muIBM/m/G461hA6lCgAJ
https://pkg.go.dev/vuln/GO-2025-3373
https://security.netapp.com/advisory/ntap-20250221-0004/