Read the docs
TI-2024-16307 Aliases CVE-2024-24790GHSA-49gw-vxvf-fc2g

Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip

Priority MEDIUM 53Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 35 fixed, 42 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat.

Summary

The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01952 80th percentileScored 2026-11-07
Fix Partial net/netip (Go standard library): 1.21.11, 1.22.4Red Hat: 41 advisoriesRed Hat: 35 fixed, 42 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Go standard librarynet/netipbefore 1.21.11; 1.22.0-0 to before 1.22.41.21.11, 1.22.4Patch availableCNA
  • net/netip VendorGo standard library Affected before 1.21.11; 1.22.0-0 to before 1.22.4 Fixed in 1.21.11, 1.22.4 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*before 1.21.11; 1.22.0 to before 1.22.4VulnerableGo standard library
  • cpe:2.3:a:golang:go:*:*:*:*:*:*:*:* Versions before 1.21.11; 1.22.0 to before 1.22.4 Vulnerable ·Go standard library

Remediation

  • Fix · CNA net/netip (Go standard library) Fixed in 1.21.11, 1.22.4

Red Hat 41 advisories

  • RHSA-2026:3718 Released 2026-03-04 · Red Hat rating Important
    Red Hat OpenShift Pipelines Release 1.15.4
    • Red Hat OpenShift Pipelines 1.15 registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel8
  • RHSA-2025:9776 Released 2025-06-26 · Red Hat rating Important
    New RHCS 8.1 container image is now available in the Red Hat Ecosystem Catalog.
    • Red Hat Ceph Storage 8.1 Tools rhceph/grafana-rhel9, rhceph/keepalived-rhel9, rhceph/oauth2-proxy-rhel9 +4
  • RHSA-2025:7256 Released 2025-05-13 · Red Hat rating Moderate
    git-lfs security update
    • Red Hat Enterprise Linux AppStream (v. 9) git-lfs-3.6.1-1.el9
Show 38 more Red Hat advisories
  • RHSA-2025:4667 Released 2025-05-07 · Red Hat rating Moderate
    Updated 7.1 container image is now available in the Red Hat Ecosystem Catalog.
    • Red Hat Ceph Storage 7.1 Tools rhceph/grafana-rhel9, rhceph/keepalived-rhel9, rhceph/rhceph-7-rhel9 +3
  • RHSA-2025:4664 Released 2025-05-07 · Red Hat rating Important
    Red Hat Ceph Storage 7.1 security, bug fix, and enhancement updates
    • Red Hat Ceph Storage 7.1 Tools ceph-2:18.2.1-329.el8cp, ceph-2:18.2.1-329.el9cp, ceph-base-2:18.2.1-329.el8cp +47
  • RHSA-2025:4240 Released 2025-04-28 · Red Hat rating Important
    Updated 6.1 container image is now available in the Red Hat Ecosystem Catalog.
    • Red Hat Ceph Storage 6.1 Tools rhceph/keepalived-rhel9, rhceph/rhceph-6-dashboard-rhel9, rhceph/rhceph-6-rhel9 +3
  • RHSA-2024:10906 Released 2024-12-10 · Red Hat rating Important
    Migration Toolkit for Containers (MTC) 1.8.5 security and bug fix update
    • 8Base-RHMTC-1.8 rhmtc/openshift-migration-controller-rhel8, rhmtc/openshift-migration-registry-rhel8, rhmtc/openshift-migration-ui-rhel8 +1
  • RHSA-2024:10775 Released 2024-12-04 · Red Hat rating Moderate
    ACS 4.6 enhancement and security update
    • RHACS 4.6 for RHEL 8 advanced-cluster-security/rhacs-main-rhel8, advanced-cluster-security/rhacs-rhel8-operator, advanced-cluster-security/rhacs-roxctl-rhel8 +3
  • RHSA-2024:10186 Released 2024-11-22 · Red Hat rating Important
    ACS 4.5 enhancement update
    • RHACS 4.5 for RHEL 8 advanced-cluster-security/rhacs-main-rhel8, advanced-cluster-security/rhacs-rhel8-operator, advanced-cluster-security/rhacs-roxctl-rhel8 +3
  • RHSA-2024:9583 Released 2024-11-13 · Red Hat rating Important
    ACS 4.4 enhancement update
    • RHACS 4.4 for RHEL 8 advanced-cluster-security/rhacs-main-rhel8, advanced-cluster-security/rhacs-rhel8-operator, advanced-cluster-security/rhacs-roxctl-rhel8 +3
  • RHSA-2024:9115 Released 2024-11-12 · Red Hat rating Moderate
    grafana security update
    • Red Hat Enterprise Linux AppStream (v. 9) grafana-10.2.6-4.el9, grafana-selinux-10.2.6-4.el9
  • RHSA-2024:8876 Released 2024-11-05 · Red Hat rating Moderate
    go-toolset:rhel8 security update
    • Red Hat Enterprise Linux AppStream (v. 8) delve-1.22.1-1.module+el8.10.0+22223+9d99ca85.aarch64::go-toolset:rhel8, delve-1.22.1-1.module+el8.10.0+22223+9d99ca85.ppc64le::go-toolset:rhel8, delve-1.22.1-1.module+el8.10.0+22223+9d99ca85.src::go-toolset:rhel8 +19
  • RHSA-2024:8418 Released 2024-10-30 · Red Hat rating Moderate
    OpenShift Container Platform 4.16.z security update
    • Ironic content for Red Hat OpenShift Container Platform 4.16 python-zipp-3.19.1-1.el9, python3-zipp-3.19.1-1.el9
    • Red Hat OpenShift Container Platform 4.16 cri-o-1.29.9-6.rhaos4.16.gite7bd45a.el8, cri-o-1.29.9-6.rhaos4.16.gite7bd45a.el9
  • RHSA-2024:6341 Released 2024-10-23 · Red Hat rating Moderate
    Kube Descheduler Operator for Red Hat OpenShift 5.1.0 for RHEL 9
    • KDO 5.1 for RHEL 9 kube-descheduler-operator/descheduler-rhel9, kube-descheduler-operator/kube-descheduler-operator-bundle, kube-descheduler-operator/kube-descheduler-rhel9-operator
  • RHSA-2024:7548 Released 2024-10-16 · Red Hat rating Moderate
    Run Once Duration Override Operator for Red Hat OpenShift 1.2.0 for RHEL 9
    • RODOO 1.2 for RHEL 9 run-once-duration-override-operator/run-once-duration-override-operator-bundle, run-once-duration-override-operator/run-once-duration-override-rhel9, run-once-duration-override-operator/run-once-duration-override-rhel9-operator
  • RHSA-2024:7987 Released 2024-10-10 · Red Hat rating Moderate
    Satellite 6.15.4 Security Update
    • Red Hat Satellite 6.15 for RHEL 8 python-cryptography-42.0.8-1.el8pc, python-django-4.2.15-1.el8pc, python-gunicorn-22.0.0-1.el8pc +5
  • RHSA-2024:7174 Released 2024-10-02 · Red Hat rating Important
    OpenShift Container Platform 4.16.15 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 openshift4/aws-kms-encryption-provider-rhel9, openshift4/azure-kms-encryption-provider-rhel9, openshift4/cloud-network-config-controller-rhel9 +47
  • RHSA-2024:6765 Released 2024-09-18 · Red Hat rating Moderate
    Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update
    • Red Hat Ansible Automation Platform 2.4 for RHEL 8 automation-controller-4.5.11-1.el8ap, automation-controller-cli-4.5.11-1.el8ap, automation-controller-server-4.5.11-1.el8ap +10
    • Red Hat Ansible Automation Platform 2.4 for RHEL 9 automation-controller-4.5.11-1.el9ap, automation-controller-cli-4.5.11-1.el9ap, automation-controller-server-4.5.11-1.el9ap +10
  • RHSA-2024:5808 Released 2024-08-29 · Red Hat rating Moderate
    OpenShift Container Platform 4.12.64 security update
    • Red Hat OpenShift Container Platform 4.12 openshift4/cloud-network-config-controller-rhel8, openshift4/egress-router-cni-rhel8, openshift4/kubevirt-csi-driver-rhel8 +47
  • RHSA-2024:5446 Released 2024-08-22 · Red Hat rating Moderate
    OpenShift Container Platform 4.13.48 packages and security update
    • Red Hat OpenShift Container Platform 4.13 cri-o-1.26.5-20.rhaos4.13.git2e90133.el8, cri-o-1.26.5-20.rhaos4.13.git2e90133.el9, openshift-4.13.0-202408092110.p0.ge0953cc.assembly.stream.el8 +16
  • RHSA-2024:5442 Released 2024-08-22 · Red Hat rating Moderate
    OpenShift Container Platform 4.15.28 packages and security update
    • Red Hat OpenShift Container Platform 4.15 cri-o-1.28.9-5.rhaos4.15.git674ed4c.el8, cri-o-1.28.9-5.rhaos4.15.git674ed4c.el9, openshift-4.15.0-202408091502.p0.g396c881.assembly.stream.el8 +22
  • RHSA-2024:5436 Released 2024-08-22 · Red Hat rating Moderate
    OpenShift Container Platform 4.14.35 security update
    • Red Hat OpenShift Container Platform 4.14 cri-o-1.27.8-5.rhaos4.14.git107168f.el8, cri-o-1.27.8-5.rhaos4.14.git107168f.el9, openshift-4.14.0-202408071611.p0.ge826056.assembly.stream.el8 +18
  • RHSA-2024:5444 Released 2024-08-22 · Red Hat rating Important
    OpenShift Container Platform 4.13.48 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/cloud-network-config-controller-rhel8, openshift4/egress-router-cni-rhel8, openshift4/kubevirt-csi-driver-rhel8 +47
  • RHSA-2024:5439 Released 2024-08-22 · Red Hat rating Important
    OpenShift Container Platform 4.15.28 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/cloud-network-config-controller-rhel8, openshift4/driver-toolkit-rhel9, openshift4/egress-router-cni-rhel8 +47
  • RHSA-2024:5433 Released 2024-08-22 · Red Hat rating Important
    OpenShift Container Platform 4.14.35 security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/cloud-network-config-controller-rhel8, openshift4/driver-toolkit-rhel9, openshift4/egress-router-cni-rhel8 +47
  • RHSA-2024:5547 Released 2024-08-19 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.16.1 bug fix and security update
    • RHODF 4.16 for RHEL 9 odf4/cephcsi-rhel9, odf4/mcg-core-rhel9, odf4/mcg-rhel9-operator +2
  • RHSA-2024:5202 Released 2024-08-19 · Red Hat rating Moderate
    OpenShift Container Platform 4.12.63 packages and security update
    • Red Hat OpenShift Container Platform 4.12 cri-o-1.25.3-7.rhaos4.12.git44a2cb2.el9, cri-o-1.25.5-25.rhaos4.12.git6556f50.el8, podman-3:4.2.0-11.rhaos4.12.el9 +13
  • RHSA-2024:5291 Released 2024-08-13 · Red Hat rating Moderate
    grafana security update
    • Red Hat Enterprise Linux AppStream (v. 8) grafana-9.2.10-17.el8_10, grafana-selinux-9.2.10-17.el8_10
  • RHSA-2024:5077 Released 2024-08-07 · Red Hat rating Moderate
    go-toolset:rhel8 security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.8) delve-1.9.1-1.module+el8.8.0+16778+5fbb74f5.src::go-toolset:rhel8, delve-1.9.1-1.module+el8.8.0+16778+5fbb74f5.x86_64::go-toolset:rhel8, go-toolset-1.19.13-2.module+el8.8.0+22004+c5f8797c.aarch64::go-toolset:rhel8 +18
  • RHSA-2024:5075 Released 2024-08-07 · Red Hat rating Moderate
    golang security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.2) golang-1.19.13-9.el9_2, golang-bin-1.19.13-9.el9_2, golang-docs-1.19.13-9.el9_2 +4
  • RHSA-2024:4785 Released 2024-08-07 · Red Hat rating Moderate
    Network Observability 1.6.1 for OpenShift
    • NETOBSERV 1.6 for RHEL 9 network-observability/network-observability-cli-rhel9, network-observability/network-observability-console-plugin-rhel9, network-observability/network-observability-ebpf-agent-rhel9 +3
  • RHSA-2024:4982 Released 2024-08-01 · Red Hat rating Important
    OpenShift API for Data Protection (OADP) 1.3.3 security and bug fix update
    • 9Base-OADP-1.3 oadp/oadp-mustgather-rhel9, oadp/oadp-rhel9-operator, oadp/oadp-velero-restic-restore-helper-rhel9 +1
  • RHSA-2024:4893 Released 2024-07-29 · Red Hat rating Moderate
    rhc-worker-script security update
    • Red Hat Enterprise Linux Server (v. 7 ELS) rhc-worker-script-0.9-5.el7_9
  • RHSA-2024:4872 Released 2024-07-25 · Red Hat rating Moderate
    Release of OpenShift Serverless 1.33.1 security update
    • Red Hat OpenShift Serverless 1.33 openshift-serverless-1-tech-preview/backstage-plugins-eventmesh-rhel8, openshift-serverless-1-tech-preview/knative-client-plugin-event-sender-rhel8, openshift-serverless-1/client-kn-rhel8 +33
  • RHSA-2024:4336 Released 2024-07-25 · Red Hat rating Moderate
    security update Logging for Red Hat OpenShift - 5.6.21
    • RHOL 5.6 for RHEL 8 openshift-logging/cluster-logging-operator-bundle, openshift-logging/cluster-logging-rhel8-operator, openshift-logging/elasticsearch-operator-bundle +15
  • RHSA-2024:4613 Released 2024-07-24 · Red Hat rating Moderate
    OpenShift Container Platform 4.16.4 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 openshift4/egress-router-cni-rhel9, openshift4/network-tools-rhel9, openshift4/ose-agent-installer-api-server-rhel9 +35
  • RHSA-2024:4333 Released 2024-07-23 · Red Hat rating Moderate
    security update Logging for Red Hat OpenShift - 5.9.4
    • RHOL 5.9 for RHEL 9 openshift-logging/cluster-logging-operator-bundle, openshift-logging/cluster-logging-rhel9-operator, openshift-logging/eventrouter-rhel9 +9
  • RHSA-2024:4697 Released 2024-07-22 · Red Hat rating Moderate
    Red Hat build of Cryostat security update
    • Cryostat 3 on RHEL 8 cryostat-tech-preview/cryostat-db-rhel8, cryostat-tech-preview/cryostat-grafana-dashboard-rhel8, cryostat-tech-preview/cryostat-operator-bundle +6
  • RHSA-2024:4335 Released 2024-07-17 · Red Hat rating Moderate
    security update Logging for Red Hat OpenShift - 5.8.9
    • RHOL 5.8 for RHEL 9 openshift-logging/cluster-logging-operator-bundle, openshift-logging/cluster-logging-rhel9-operator, openshift-logging/elasticsearch-operator-bundle +14
  • RHSA-2024:4237 Released 2024-07-02 · Red Hat rating Moderate
    go-toolset security update
    • Red Hat Enterprise Linux AppStream (v. 8) delve-1.21.2-3.module+el8.10.0+21244+5b2d9000.aarch64::go-toolset:rhel8, delve-1.21.2-3.module+el8.10.0+21244+5b2d9000.ppc64le::go-toolset:rhel8, delve-1.21.2-3.module+el8.10.0+21244+5b2d9000.src::go-toolset:rhel8 +19
  • RHSA-2024:4212 Released 2024-07-02 · Red Hat rating Moderate
    golang security update
    • Red Hat Enterprise Linux AppStream (v. 9) go-toolset-1.21.11-1.el9_4, golang-1.21.11-1.el9_4, golang-bin-1.21.11-1.el9_4 +4

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Builds for Red Hat OpenShiftAffectedNo fix planned: Will not fix
Cryostat 2AffectedNo fix yet
Fence Agents Remediation OperatorAffectedNo fix planned: Will not fix
Machine Deletion Remediation OperatorAffectedNo fix yet
Migration Toolkit for Applications 6AffectedNo fix planned: Will not fix
Migration Toolkit for Applications 7AffectedNo fix planned: Will not fix
NBDE Tang ServerAffectedNo fix planned: Will not fix
Node HealthCheck OperatorAffectedNo fix planned: Will not fix
Node Maintenance OperatorAffectedNo fix planned: Will not fix
OpenShift Developer Tools and ServicesAffectedNo fix planned: Will not fix
OpenShift PipelinesAffectedNo fix yet
OpenShift ServerlessAffectedNo fix yet
OpenShift Source-to-Image (S2I)AffectedNo fix yet
Power monitoring for Red Hat OpenShiftAffectedNo fix yet
Red Hat 3scale API Management Platform 2AffectedNo fix planned: Will not fix
Red Hat Advanced Cluster Security 3AffectedNo fix planned: Will not fix
Red Hat Ceph Storage 5AffectedNo fix planned: Out of support scope
Red Hat Ceph Storage 8AffectedNo fix yet
Red Hat Certification Program for Red Hat Enterprise Linux 9AffectedNo fix yet: Fix deferred
Red Hat Certification for Red Hat Enterprise Linux 8AffectedNo fix yet: Fix deferred
Red Hat Connectivity Link 1AffectedNo fix yet
Red Hat Enterprise Linux 10AffectedNo fix yet
Red Hat Enterprise Linux 8AffectedNo fix yet
Red Hat Enterprise Linux 9AffectedNo fix yet
Red Hat OpenShift Container Platform Assisted Installer 1AffectedNo fix yet
Red Hat OpenShift Data Science (RHODS)AffectedNo fix yet
Red Hat OpenShift Dev SpacesAffectedNo fix planned: Will not fix
Red Hat OpenShift GitOpsAffectedNo fix planned: Will not fix
Red Hat OpenShift Virtualization 4AffectedNo fix yet
Red Hat OpenShift distributed tracing 2AffectedNo fix yet
Red Hat OpenShift distributed tracing 3AffectedNo fix yet
Red Hat OpenShift on AWSAffectedNo fix planned: Will not fix
Red Hat OpenStack Platform 16.2AffectedNo fix yet
Red Hat OpenStack Platform 17.1AffectedNo fix yet
Red Hat OpenStack Platform 18.0AffectedNo fix planned: Will not fix
Red Hat Openshift Sandboxed ContainersAffectedNo fix yet
Red Hat Service Interconnect 1AffectedNo fix planned: Will not fix
Red Hat Storage 3AffectedNo fix planned: Out of support scope
Red Hat Web TerminalAffectedNo fix planned: Will not fix
Self Node Remediation OperatorAffectedNo fix planned: Will not fix
Service Telemetry Framework 1.5AffectedNo fix planned: Will not fix
streams for Apache KafkaAffectedNo fix yet
8Base-RHMTC-1.8Fixed RHSA-2024:10906
9Base-OADP-1.3Fixed RHSA-2024:4982
Cryostat 3 on RHEL 8Fixed RHSA-2024:4697
KDO 5.1 for RHEL 9Fixed RHSA-2024:6341
LVMS 4.13 for RHEL 8Fixed—
NETOBSERV 1.6 for RHEL 9Fixed RHSA-2024:4785
OpenShift Developer Tools and Services for OCP 4.17Fixed—
RHACS 4.4 for RHEL 8Fixed RHSA-2024:9583
RHACS 4.5 for RHEL 8Fixed RHSA-2024:10186
RHACS 4.6 for RHEL 8Fixed RHSA-2024:10775
RHODF 4.16 for RHEL 9Fixed RHSA-2024:5547
RHOL 5.6 for RHEL 8Fixed RHSA-2024:4336
RHOL 5.8 for RHEL 9Fixed RHSA-2024:4335
RHOL 5.9 for RHEL 9Fixed RHSA-2024:4333
RODOO 1.2 for RHEL 9Fixed RHSA-2024:7548
Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9Fixed—
Red Hat Ansible Automation Platform 2.4 for RHEL 8Fixed RHSA-2024:6765
Red Hat Ansible Automation Platform 2.4 for RHEL 9Fixed RHSA-2024:6765
Red Hat Ceph Storage 6.1 ToolsFixed RHSA-2025:4240
Red Hat Ceph Storage 7.1 ToolsFixed RHSA-2025:4664, RHSA-2025:4667
Red Hat Ceph Storage 8.1 ToolsFixed RHSA-2025:9776
Red Hat Developer Hub 1.3 for RHEL 9Fixed—
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2024:4237, RHSA-2024:5291, RHSA-2024:8876
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2024:4212, RHSA-2024:9115, RHSA-2025:7256
Red Hat Enterprise Linux AppStream EUS (v.8.8)Fixed RHSA-2024:5077
Red Hat Enterprise Linux AppStream EUS (v.9.2)Fixed RHSA-2024:5075
Red Hat Enterprise Linux Server (v. 7 ELS)Fixed RHSA-2024:4893
Red Hat OpenShift Container Platform 4.12Fixed RHSA-2024:5202, RHSA-2024:5808
Red Hat OpenShift Container Platform 4.13Fixed RHSA-2024:5444, RHSA-2024:5446
Red Hat OpenShift Container Platform 4.14Fixed RHSA-2024:5433, RHSA-2024:5436
Red Hat OpenShift Container Platform 4.15Fixed RHSA-2024:5439, RHSA-2024:5442
Red Hat OpenShift Container Platform 4.16Fixed RHSA-2024:4613, RHSA-2024:7174, RHSA-2024:8418
Red Hat OpenShift Pipelines 1.15Fixed RHSA-2026:3718
Red Hat OpenShift Serverless 1.33Fixed RHSA-2024:4872
Red Hat Satellite 6.15 for RHEL 8Fixed RHSA-2024:7987
Not affected: 28 products
  • 8Base-RHMTC-1.8
  • 9Base-OADP-1.3
  • Cost Management Metrics Operator
  • Ironic content for Red Hat OpenShift Container Platform 4.13
  • Ironic content for Red Hat OpenShift Container Platform 4.16
  • Migration Toolkit for Virtualization
  • Multicluster Engine for Kubernetes
  • RHACS 4.4 for RHEL 8
  • RHACS 4.5 for RHEL 8
  • RHACS 4.6 for RHEL 8
  • RHODF 4.16 for RHEL 9
  • Red Hat Ansible Automation Platform 2.4 for RHEL 8
  • Red Hat Ansible Automation Platform 2.4 for RHEL 9
  • Red Hat Developer Hub 1.3 for RHEL 9
  • Red Hat Enterprise Linux 10
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • Red Hat OpenShift AI (RHOAI)
  • Red Hat OpenShift Container Platform 4
  • Red Hat OpenShift Container Platform 4.12
  • Red Hat OpenShift Container Platform 4.13
  • Red Hat OpenShift Container Platform 4.14
  • Red Hat OpenShift Container Platform 4.15
  • Red Hat OpenShift Container Platform 4.16
  • Red Hat OpenShift Pipelines 1.15
  • Red Hat OpenStack Platform 16.2
  • Red Hat OpenStack Platform 17.1
  • Red Hat Satellite 6.15 for RHEL 8

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-24790
  2. 2026-10-03 Alias added: GHSA-49gw-vxvf-fc2g
  3. 2026-10-13 Affected versions changed · Red Hat
  4. 2026-10-16 Affected versions changed · Red Hat

References

Patch 1

Advisory 2

Other 2

  • TI-2020-00578 Improper certificate validation in Microsoft Windows KEVCVSS 3.1HIGH 8.1
  • TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
  • TI-2018-05208 The "go get" implementation in Go 1.9.4, when the -insecure command-line option is used… CVSS 3.1HIGH 8.8
  • TI-2018-12083 Improper input validation in [UNKNOWN] golang CVSS 3.1HIGH 8.1
  • TI-2024-16306 Mishandling of corrupt central directory record in archive/zip CVSS 3.1MEDIUM 5.5
  • TI-2021-15910 Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a… CVSS 3.1CRITICAL 9.8
See all 170 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences