{"metadata": {"vulnerability": "rhsa-2024:1640", "count": 114, "kinds": {"milestone": 25, "sighting": 2, "kev": 0, "other": 87}}, "data": [{"timestamp": "2023-07-27T17:05:55.188Z", "date_only": false, "value": "2023-07-27T17:05:55.188Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2023-39326", "record": "CVE-2023-39326", "field": "cveMetadata.dateReserved", "linked_record": true}, {"timestamp": "2023-08-22T16:57:23.932Z", "date_only": false, "value": "2023-08-22T16:57:23.932Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2023-41040", "record": "CVE-2023-41040", "field": "cveMetadata.dateReserved", "linked_record": true}, {"timestamp": "2023-08-30T21:07:42.263Z", "date_only": false, "value": "2023-08-30T21:07:42.263Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2023-41040", "record": "CVE-2023-41040", "field": "cveMetadata.datePublished", "linked_record": true}, {"timestamp": "2023-08-31T00:00:00Z", "date_only": false, "value": "2023-08-31T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat", "record": "rhsa-2024:1640", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2023-10-14T00:00:00Z", "date_only": false, "value": "2023-10-14T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2023-45857", "record": "CVE-2023-45857", "field": "cveMetadata.dateReserved", "linked_record": true}, {"timestamp": "2023-10-16T17:51:35.574Z", "date_only": false, "value": "2023-10-16T17:51:35.574Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2023-46137", "record": "CVE-2023-46137", "field": "cveMetadata.dateReserved", "linked_record": true}, {"timestamp": "2023-10-25T00:00:00Z", "date_only": false, "value": "2023-10-25T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat", "record": "rhsa-2024:1640", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2023-10-25T20:56:27.320Z", "date_only": false, "value": "2023-10-25T20:56:27.320Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2023-46137", "record": "CVE-2023-46137", "field": "cveMetadata.datePublished", "linked_record": true}, {"timestamp": "2023-10-25T20:56:27.320Z", "date_only": false, "value": "2023-10-25T20:56:27.320Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-46137 / GitHub_M", "record": "CVE-2023-46137", "field": "containers.cna.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2023-10-26T00:00:00Z", "date_only": false, "value": "2023-10-26T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat", "record": "rhsa-2024:1640", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2023-10-30T00:00:00Z", "date_only": false, "value": "2023-10-30T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat", "record": "rhsa-2024:1640", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2023-11-07T16:57:49.244Z", "date_only": false, "value": "2023-11-07T16:57:49.244Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2023-47627", "record": "CVE-2023-47627", "field": "cveMetadata.dateReserved", "linked_record": true}, {"timestamp": "2023-11-08T00:00:00Z", "date_only": false, "value": "2023-11-08T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2023-45857", "record": "CVE-2023-45857", "field": "cveMetadata.datePublished", "linked_record": true}, {"timestamp": "2023-11-09T00:00:00Z", "date_only": false, "value": "2023-11-09T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat", "record": "rhsa-2024:1640", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2023-11-09T00:00:00Z", "date_only": false, "value": "2023-11-09T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat", "record": "rhsa-2024:1640", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2023-11-14T20:48:48.076Z", "date_only": false, "value": "2023-11-14T20:48:48.076Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2023-47627", "record": "CVE-2023-47627", "field": "cveMetadata.datePublished", "linked_record": true}, {"timestamp": "2023-11-15T00:00:00Z", "date_only": false, "value": "2023-11-15T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat", "record": "rhsa-2024:1640", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2023-11-15T00:00:00Z", "date_only": false, "value": "2023-11-15T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat", "record": "rhsa-2024:1640", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2023-11-21T18:57:30.428Z", "date_only": false, "value": "2023-11-21T18:57:30.428Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2023-49083", "record": "CVE-2023-49083", "field": "cveMetadata.dateReserved", "linked_record": true}, {"timestamp": "2023-11-28T00:00:00Z", "date_only": false, "value": "2023-11-28T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat", "record": "rhsa-2024:1640", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2023-11-29T18:50:24.263Z", "date_only": false, "value": "2023-11-29T18:50:24.263Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2023-49083", "record": "CVE-2023-49083", "field": "cveMetadata.datePublished", "linked_record": true}, {"timestamp": "2023-12-06T00:00:00Z", "date_only": false, "value": "2023-12-06T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat", "record": "rhsa-2024:1640", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2023-12-06T00:00:00Z", "date_only": false, "value": "2023-12-06T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat", "record": "rhsa-2024:1640", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-12-06T16:27:53.832Z", "date_only": false, "value": "2023-12-06T16:27:53.832Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2023-39326", "record": "CVE-2023-39326", "field": "cveMetadata.datePublished", "linked_record": true}, {"timestamp": "2023-12-20T00:00:00Z", "date_only": false, "value": "2023-12-20T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat", "record": "rhsa-2024:1640", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2024-01-08T04:59:27.371Z", "date_only": false, "value": "2024-01-08T04:59:27.371Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2024-22195", "record": "CVE-2024-22195", "field": "cveMetadata.dateReserved", "linked_record": true}, {"timestamp": "2024-01-10T19:22:18.504Z", "date_only": false, "value": "2024-01-10T19:22:18.504293Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2023-47627 / CISA-ADP", "record": "CVE-2023-47627", "field": "containers.adp.1.metrics.0.other.content.timestamp", "linked_record": true}, {"timestamp": "2024-01-11T00:00:00Z", "date_only": false, "value": "2024-01-11T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat", "record": "rhsa-2024:1640", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2024-01-11T00:00:00Z", "date_only": false, "value": "2024-01-11T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat", "record": "rhsa-2024:1640", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2024-01-11T02:25:44.239Z", "date_only": false, "value": "2024-01-11T02:25:44.239Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2024-22195", "record": "CVE-2024-22195", "field": "cveMetadata.datePublished", "linked_record": true}, {"timestamp": "2024-01-11T19:50:04.135Z", "date_only": false, "value": "2024-01-11T19:50:04.135839Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2024-22195 / CISA-ADP", "record": "CVE-2024-22195", "field": "containers.adp.1.metrics.0.other.content.timestamp", "linked_record": true}, {"timestamp": "2024-01-15T15:19:19.443Z", "date_only": false, "value": "2024-01-15T15:19:19.443Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2024-23334", "record": "CVE-2024-23334", "field": "cveMetadata.dateReserved", "linked_record": true}, {"timestamp": "2024-01-20T04:06:26.754Z", "date_only": false, "value": "2024-01-20T04:06:26.754Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-39326 / Go", "record": "CVE-2023-39326", "field": "containers.cna.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2024-01-22T22:23:54.338Z", "date_only": false, "value": "2024-01-22T22:23:54.338Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2024-23829", "record": "CVE-2024-23829", "field": "cveMetadata.dateReserved", "linked_record": true}, {"timestamp": "2024-01-26T00:00:00Z", "date_only": false, "value": "2024-01-26T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2024-24680", "record": "CVE-2024-24680", "field": "cveMetadata.dateReserved", "linked_record": true}, {"timestamp": "2024-01-27T03:06:22.076Z", "date_only": false, "value": "2024-01-27T03:06:22.076Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-22195 / GitHub_M", "record": "CVE-2024-22195", "field": "containers.cna.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2024-01-29T22:41:35.032Z", "date_only": false, "value": "2024-01-29T22:41:35.032Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2024-23829", "record": "CVE-2024-23829", "field": "cveMetadata.datePublished", "linked_record": true}, {"timestamp": "2024-01-29T22:41:39.584Z", "date_only": false, "value": "2024-01-29T22:41:39.584Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2024-23334", "record": "CVE-2024-23334", "field": "cveMetadata.datePublished", "linked_record": true}, {"timestamp": "2024-01-30T00:00:00Z", "date_only": false, "value": "2024-01-30T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat", "record": "rhsa-2024:1640", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2024-01-30T00:00:00Z", "date_only": false, "value": "2024-01-30T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat", "record": "rhsa-2024:1640", "field": "vulnerabilities.8.release_date"}, {"timestamp": "2024-02-01T16:40:08.863Z", "date_only": false, "value": "2024-02-01T16:40:08.863740Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2024-23829 / CISA-ADP", "record": "CVE-2024-23829", "field": "containers.adp.1.metrics.0.other.content.timestamp", "linked_record": true}, {"timestamp": "2024-02-05T07:06:04.991Z", "date_only": false, "value": "2024-02-05T07:06:04.991Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-47627 / GitHub_M", "record": "CVE-2023-47627", "field": "containers.cna.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2024-02-06T00:00:00Z", "date_only": false, "value": "2024-02-06T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat", "record": "rhsa-2024:1640", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2024-02-06T00:00:00Z", "date_only": false, "value": "2024-02-06T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2024-24680", "record": "CVE-2024-24680", "field": "cveMetadata.datePublished", "linked_record": true}, {"timestamp": "2024-02-06T00:00:00Z", "date_only": false, "value": "2024-02-06T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 \u00b7 CVE-2024-1394 / redhat", "record": "CVE-2024-1394", "field": "containers.cna.timeline.0.time", "text": "Reported to Red Hat.", "linked_record": true}, {"timestamp": "2024-02-06T15:00:00Z", "date_only": false, "value": "2024-02-06T15:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat", "record": "rhsa-2024:1640", "field": "vulnerabilities.10.release_date"}, {"timestamp": "2024-02-09T03:06:24.340Z", "date_only": false, "value": "2024-02-09T03:06:24.340Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-23334 / GitHub_M", "record": "CVE-2024-23334", "field": "containers.cna.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2024-02-09T03:06:26.337Z", "date_only": false, "value": "2024-02-09T03:06:26.337Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-23829 / GitHub_M", "record": "CVE-2024-23829", "field": "containers.cna.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2024-02-09T06:02:35.056Z", "date_only": false, "value": "2024-02-09T06:02:35.056Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2024-1394", "record": "CVE-2024-1394", "field": "cveMetadata.dateReserved", "linked_record": true}, {"timestamp": "2024-02-17T02:06:11.686Z", "date_only": false, "value": "2024-02-17T02:06:11.686Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-49083 / GitHub_M", "record": "CVE-2023-49083", "field": "containers.cna.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2024-02-25T00:00:00Z", "date_only": false, "value": "2024-02-25T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2024-27351", "record": "CVE-2024-27351", "field": "cveMetadata.dateReserved", "linked_record": true}, {"timestamp": "2024-02-26T00:00:00Z", "date_only": false, "value": "2024-02-26T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat", "record": "rhsa-2024:1640", "field": "vulnerabilities.11.discovery_date"}, {"timestamp": "2024-03-04T09:00:00Z", "date_only": false, "value": "2024-03-04T09:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat", "record": "rhsa-2024:1640", "field": "vulnerabilities.11.release_date"}, {"timestamp": "2024-03-15T00:00:00Z", "date_only": false, "value": "2024-03-15T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2024-27351", "record": "CVE-2024-27351", "field": "cveMetadata.datePublished", "linked_record": true}, {"timestamp": "2024-03-20T00:00:00Z", "date_only": false, "value": "2024-03-20T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 \u00b7 CVE-2024-1394 / redhat", "record": "CVE-2024-1394", "field": "containers.cna.datePublic", "linked_record": true}, {"timestamp": "2024-03-20T00:00:00Z", "date_only": false, "value": "2024-03-20T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat", "record": "rhsa-2024:1640", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2024-03-20T00:00:00Z", "date_only": false, "value": "2024-03-20T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 \u00b7 CVE-2024-1394 / redhat", "record": "CVE-2024-1394", "field": "containers.cna.timeline.1.time", "text": "Made public.", "linked_record": true}, {"timestamp": "2024-03-21T12:16:38.790Z", "date_only": false, "value": "2024-03-21T12:16:38.790Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2024-1394", "record": "CVE-2024-1394", "field": "cveMetadata.datePublished", "linked_record": true}, {"timestamp": "2024-03-21T18:21:05.099Z", "date_only": false, "value": "2024-03-21T18:21:05.099385Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2024-1394 / CISA-ADP", "record": "CVE-2024-1394", "field": "containers.adp.0.metrics.0.other.content.timestamp", "linked_record": true}, {"timestamp": "2024-04-02T19:34:39Z", "date_only": false, "value": "2024-04-02T19:34:39+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat", "record": "rhsa-2024:1640", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-04-02T19:34:39Z", "date_only": false, "value": "2024-04-02T19:34:39+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat", "record": "rhsa-2024:1640", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-04-02T19:34:39Z", "date_only": false, "value": "2024-04-02T19:34:39+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat", "record": "rhsa-2024:1640", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2024-04-20T03:05:55.273Z", "date_only": false, "value": "2024-04-20T03:05:55.273Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-24680 / mitre", "record": "CVE-2024-24680", "field": "containers.cna.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2024-04-20T19:41:21.960Z", "date_only": false, "value": "2024-04-20T19:41:21.960404Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2024-27351 / CISA-ADP", "record": "CVE-2024-27351", "field": "containers.adp.0.metrics.1.other.content.timestamp", "linked_record": true}, {"timestamp": "2024-05-01T17:09:52.661Z", "date_only": false, "value": "2024-05-01T17:09:52.661Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-27351 / mitre", "record": "CVE-2024-27351", "field": "containers.cna.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2024-06-04T17:46:29.510Z", "date_only": false, "value": "2024-06-04T17:46:29.510Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-27351 / CISA-ADP", "record": "CVE-2024-27351", "field": "containers.adp.0.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2024-06-05T13:50:55.732Z", "date_only": false, "value": "2024-06-05T13:50:55.732Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-1394 / CISA-ADP", "record": "CVE-2024-1394", "field": "containers.adp.0.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2024-06-21T19:06:56.497Z", "date_only": false, "value": "2024-06-21T19:06:56.497Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-45857 / mitre", "record": "CVE-2023-45857", "field": "containers.cna.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2024-08-01T18:40:20.583Z", "date_only": false, "value": "2024-08-01T18:40:20.583Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-1394 / CVE", "record": "CVE-2024-1394", "field": "containers.adp.1.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2024-08-02T18:02:06.808Z", "date_only": false, "value": "2024-08-02T18:02:06.808Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-39326 / CVE", "record": "CVE-2023-39326", "field": "containers.adp.0.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2024-08-02T20:29:32.674Z", "date_only": false, "value": "2024-08-02T20:29:32.674Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-45857 / CVE", "record": "CVE-2023-45857", "field": "containers.adp.0.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2024-09-04T15:13:57.418Z", "date_only": false, "value": "2024-09-04T15:13:57.418014Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2023-45857 / CISA-ADP", "record": "CVE-2023-45857", "field": "containers.adp.1.metrics.0.other.content.timestamp", "linked_record": true}, {"timestamp": "2024-09-04T15:15:16.506Z", "date_only": false, "value": "2024-09-04T15:15:16.506Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-45857", "record": "CVE-2023-45857", "field": "cveMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2024-09-04T15:15:16.506Z", "date_only": false, "value": "2024-09-04T15:15:16.506Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-45857 / CISA-ADP", "record": "CVE-2023-45857", "field": "containers.adp.1.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2024-09-10T13:57:52.009Z", "date_only": false, "value": "2024-09-10T13:57:52.009306Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2023-46137 / CISA-ADP", "record": "CVE-2023-46137", "field": "containers.adp.1.metrics.0.other.content.timestamp", "linked_record": true}, {"timestamp": "2024-09-10T14:05:53.980Z", "date_only": false, "value": "2024-09-10T14:05:53.980Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-46137 / CISA-ADP", "record": "CVE-2023-46137", "field": "containers.adp.1.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2024-10-01T18:04:46.833Z", "date_only": false, "value": "2024-10-01T18:04:46.833039Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2023-41040 / CISA-ADP", "record": "CVE-2023-41040", "field": "containers.adp.1.metrics.0.other.content.timestamp", "linked_record": true}, {"timestamp": "2024-10-01T18:04:56.017Z", "date_only": false, "value": "2024-10-01T18:04:56.017Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-41040 / CISA-ADP", "record": "CVE-2023-41040", "field": "containers.adp.1.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2024-10-11T17:02:19.713Z", "date_only": false, "value": "2024-10-11T17:02:19.713Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-47627 / CISA-ADP", "record": "CVE-2023-47627", "field": "containers.adp.1.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2024-11-12T21:29:17.223Z", "date_only": false, "value": "2024-11-12T21:29:17.223Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-23829 / CISA-ADP", "record": "CVE-2024-23829", "field": "containers.adp.1.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2024-11-19T19:31:08Z", "date_only": false, "value": "2024-11-19T19:31:08.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-41040 / GitHub_M", "record": "CVE-2023-41040", "field": "containers.cna.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2025-01-13T09:11:16Z", "date_only": false, "value": "2025-01-13T09:11:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1356", "record": "RHSA-2024:1640", "field": "creation_timestamp", "uuid": "2d7e5e22-134d-47e4-8e15-38619684615e", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1394\n\ud83d\udd39 Description: A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs\u200b. The memory leak happens in github.com/golang-fips/openssl/openssl/rsa.go#L113. The objects leaked are pkey\u200b and ctx\u200b. That function uses named return parameters to free pkey\u200b and ctx\u200b if there is an error initializing the context or setting the different properties. All return statements related to error cases follow the \"return nil, nil, fail(...)\" pattern, meaning that pkey\u200b and ctx\u200b will be nil inside the deferred function that should free them.\n\ud83d\udccf Published: 2024-03-21T12:16:38.790Z\n\ud83d\udccf Modified: 2025-01-13T08:35:31.150Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2024:1462\n2. https://access.redhat.com/errata/RHSA-2024:1468\n3. https://access.redhat.com/errata/RHSA-2024:1472\n4. https://access.redhat.com/errata/RHSA-2024:1501\n5. https://access.redhat.com/errata/RHSA-2024:1502\n6. https://access.redhat.com/errata/RHSA-2024:1561\n7. https://access.redhat.com/errata/RHSA-2024:1563\n8. https://access.redhat.com/errata/RHSA-2024:1566\n9. https://access.redhat.com/errata/RHSA-2024:1567\n10. https://access.redhat.com/errata/RHSA-2024:1574\n11. https://access.redhat.com/errata/RHSA-2024:1640\n12. https://access.redhat.com/errata/RHSA-2024:1644\n13. https://access.redhat.com/errata/RHSA-2024:1646\n14. https://access.redhat.com/errata/RHSA-2024:1763\n15. https://access.redhat.com/errata/RHSA-2024:1897\n16. https://access.redhat.com/errata/RHSA-2024:2562\n17. https://access.redhat.com/errata/RHSA-2024:2568\n18. https://access.redhat.com/errata/RHSA-2024:2569\n19. https://access.redhat.com/errata/RHSA-2024:2729\n20. https://access.redhat.com/errata/RHSA-2024:2730\n21. https://access.redhat.com/errata/RHSA-2024:2767\n22. https://access.redhat.com/errata/RHSA-2024:3265\n23. https://access.redhat.com/errata/RHSA-2024:3352\n24. https://access.redhat.com/errata/RHSA-2024:4146\n25. https://access.redhat.com/errata/RHSA-2024:4371\n26. https://access.redhat.com/errata/RHSA-2024:4378\n27. https://access.redhat.com/errata/RHSA-2024:4379\n28. https://access.redhat.com/errata/RHSA-2024:4502\n29. https://access.redhat.com/errata/RHSA-2024:4581\n30. https://access.redhat.com/errata/RHSA-2024:4591\n31. https://access.redhat.com/errata/RHSA-2024:4672\n32. https://access.redhat.com/errata/RHSA-2024:4699\n33. https://access.redhat.com/errata/RHSA-2024:4761\n34. https://access.redhat.com/errata/RHSA-2024:4762\n35. https://access.redhat.com/errata/RHSA-2024:4960\n36. https://access.redhat.com/errata/RHSA-2024:5258\n37. https://access.redhat.com/errata/RHSA-2024:5634\n38. https://access.redhat.com/errata/RHSA-2024:7262\n39. https://access.redhat.com/security/cve/CVE-2024-1394\n40. https://bugzilla.redhat.com/show_bug.cgi?id=2262921\n41. https://github.com/golang-fips/openssl/commit/85d31d0d257ce842c8a1e63c4d230ae850348136\n42. https://github.com/golang-fips/openssl/security/advisories/GHSA-78hx-gp6g-7mj6\n43. https://github.com/microsoft/go-crypto-openssl/commit/104fe7f6912788d2ad44602f77a0a0a62f1f259f\n44. https://pkg.go.dev/vuln/GO-2024-2660\n45. https://vuln.go.dev/ID/GO-2024-2660.json", "url": "https://t.me/DarkWebInformer_CVEAlerts/1356", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-13T17:02:50.990Z", "date_only": false, "value": "2025-02-13T17:02:50.990Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-39326", "record": "CVE-2023-39326", "field": "cveMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2025-05-08T17:27:36.284Z", "date_only": false, "value": "2025-05-08T17:27:36.284904Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2024-24680 / CISA-ADP", "record": "CVE-2024-24680", "field": "containers.adp.1.metrics.1.other.content.timestamp", "linked_record": true}, {"timestamp": "2025-05-12T23:29:31Z", "date_only": false, "value": "2025-05-12T23:29:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16071", "record": "RHSA-2024:1640", "field": "creation_timestamp", "uuid": "5aaa628e-f6cd-496a-82a1-9eb01fbdefdb", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1394\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs\u200b. The memory leak happens in github.com/golang-fips/openssl/openssl/rsa.go#L113. The objects leaked are pkey\u200b and ctx\u200b. That function uses named return parameters to free pkey\u200b and ctx\u200b if there is an error initializing the context or setting the different properties. All return statements related to error cases follow the \"return nil, nil, fail(...)\" pattern, meaning that pkey\u200b and ctx\u200b will be nil inside the deferred function that should free them.\n\ud83d\udccf Published: 2024-03-21T12:16:38.790Z\n\ud83d\udccf Modified: 2025-05-12T23:02:02.486Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2024:1462\n2. https://access.redhat.com/errata/RHSA-2024:1468\n3. https://access.redhat.com/errata/RHSA-2024:1472\n4. https://access.redhat.com/errata/RHSA-2024:1501\n5. https://access.redhat.com/errata/RHSA-2024:1502\n6. https://access.redhat.com/errata/RHSA-2024:1561\n7. https://access.redhat.com/errata/RHSA-2024:1563\n8. https://access.redhat.com/errata/RHSA-2024:1566\n9. https://access.redhat.com/errata/RHSA-2024:1567\n10. https://access.redhat.com/errata/RHSA-2024:1574\n11. https://access.redhat.com/errata/RHSA-2024:1640\n12. https://access.redhat.com/errata/RHSA-2024:1644\n13. https://access.redhat.com/errata/RHSA-2024:1646\n14. https://access.redhat.com/errata/RHSA-2024:1763\n15. https://access.redhat.com/errata/RHSA-2024:1897\n16. https://access.redhat.com/errata/RHSA-2024:2562\n17. https://access.redhat.com/errata/RHSA-2024:2568\n18. https://access.redhat.com/errata/RHSA-2024:2569\n19. https://access.redhat.com/errata/RHSA-2024:2729\n20. https://access.redhat.com/errata/RHSA-2024:2730\n21. https://access.redhat.com/errata/RHSA-2024:2767\n22. https://access.redhat.com/errata/RHSA-2024:3265\n23. https://access.redhat.com/errata/RHSA-2024:3352\n24. https://access.redhat.com/errata/RHSA-2024:4146\n25. https://access.redhat.com/errata/RHSA-2024:4371\n26. https://access.redhat.com/errata/RHSA-2024:4378\n27. https://access.redhat.com/errata/RHSA-2024:4379\n28. https://access.redhat.com/errata/RHSA-2024:4502\n29. https://access.redhat.com/errata/RHSA-2024:4581\n30. https://access.redhat.com/errata/RHSA-2024:4591\n31. https://access.redhat.com/errata/RHSA-2024:4672\n32. https://access.redhat.com/errata/RHSA-2024:4699\n33. https://access.redhat.com/errata/RHSA-2024:4761\n34. https://access.redhat.com/errata/RHSA-2024:4762\n35. https://access.redhat.com/errata/RHSA-2024:4960\n36. https://access.redhat.com/errata/RHSA-2024:5258\n37. https://access.redhat.com/errata/RHSA-2024:5634\n38. https://access.redhat.com/errata/RHSA-2024:7262\n39. https://access.redhat.com/security/cve/CVE-2024-1394\n40. https://bugzilla.redhat.com/show_bug.cgi?id=2262921\n41. https://github.com/golang-fips/openssl/commit/85d31d0d257ce842c8a1e63c4d230ae850348136\n42. https://github.com/golang-fips/openssl/security/advisories/GHSA-78hx-gp6g-7mj6\n43. https://github.com/microsoft/go-crypto-openssl/commit/104fe7f6912788d2ad44602f77a0a0a62f1f259f\n44. https://pkg.go.dev/vuln/GO-2024-2660\n45. https://vuln.go.dev/ID/GO-2024-2660.json", "url": "https://t.me/DarkWebInformer_CVEAlerts/16071", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-05-15T19:45:42.164Z", "date_only": false, "value": "2025-05-15T19:45:42.164Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-24680 / CISA-ADP", "record": "CVE-2024-24680", "field": "containers.adp.1.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2025-05-30T19:29:24.076Z", "date_only": false, "value": "2025-05-30T19:29:24.076502Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2024-23334 / CISA-ADP", "record": "CVE-2024-23334", "field": "containers.adp.1.metrics.0.other.content.timestamp", "linked_record": true}, {"timestamp": "2025-05-30T19:33:07.763Z", "date_only": false, "value": "2025-05-30T19:33:07.763Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-23334 / CISA-ADP", "record": "CVE-2024-23334", "field": "containers.adp.1.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2025-06-17T21:09:16.304Z", "date_only": false, "value": "2025-06-17T21:09:16.304Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-22195 / CISA-ADP", "record": "CVE-2024-22195", "field": "containers.adp.1.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2025-11-03T20:36:06.806Z", "date_only": false, "value": "2025-11-03T20:36:06.806Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-47627", "record": "CVE-2023-47627", "field": "cveMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2025-11-03T20:36:06.806Z", "date_only": false, "value": "2025-11-03T20:36:06.806Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-47627 / CVE", "record": "CVE-2023-47627", "field": "containers.adp.0.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2025-11-03T20:36:49.579Z", "date_only": false, "value": "2025-11-03T20:36:49.579Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-23829", "record": "CVE-2024-23829", "field": "cveMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2025-11-03T20:36:49.579Z", "date_only": false, "value": "2025-11-03T20:36:49.579Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-23829 / CVE", "record": "CVE-2024-23829", "field": "containers.adp.0.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2025-11-03T21:49:29.315Z", "date_only": false, "value": "2025-11-03T21:49:29.315Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-41040", "record": "CVE-2023-41040", "field": "cveMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2025-11-03T21:49:29.315Z", "date_only": false, "value": "2025-11-03T21:49:29.315Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-41040 / CVE", "record": "CVE-2023-41040", "field": "containers.adp.0.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2025-11-03T21:49:56.068Z", "date_only": false, "value": "2025-11-03T21:49:56.068Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-46137", "record": "CVE-2023-46137", "field": "cveMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2025-11-03T21:49:56.068Z", "date_only": false, "value": "2025-11-03T21:49:56.068Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-46137 / CVE", "record": "CVE-2023-46137", "field": "containers.adp.0.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2025-11-03T21:50:11.841Z", "date_only": false, "value": "2025-11-03T21:50:11.841Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-49083 / CVE", "record": "CVE-2023-49083", "field": "containers.adp.0.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2025-11-03T21:53:45.551Z", "date_only": false, "value": "2025-11-03T21:53:45.551Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-22195", "record": "CVE-2024-22195", "field": "cveMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2025-11-03T21:53:45.551Z", "date_only": false, "value": "2025-11-03T21:53:45.551Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-22195 / CVE", "record": "CVE-2024-22195", "field": "containers.adp.0.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2025-11-04T18:29:09.931Z", "date_only": false, "value": "2025-11-04T18:29:09.931Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-24680", "record": "CVE-2024-24680", "field": "cveMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2025-11-04T18:29:09.931Z", "date_only": false, "value": "2025-11-04T18:29:09.931Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-24680 / CVE", "record": "CVE-2024-24680", "field": "containers.adp.0.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2025-11-04T18:30:07.884Z", "date_only": false, "value": "2025-11-04T18:30:07.884Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-27351", "record": "CVE-2024-27351", "field": "cveMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2025-11-04T18:30:07.884Z", "date_only": false, "value": "2025-11-04T18:30:07.884Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-27351 / CVE", "record": "CVE-2024-27351", "field": "containers.adp.1.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2025-12-18T15:31:36.864Z", "date_only": false, "value": "2025-12-18T15:31:36.864359Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2023-49083 / CISA-ADP", "record": "CVE-2023-49083", "field": "containers.adp.1.metrics.0.other.content.timestamp", "linked_record": true}, {"timestamp": "2025-12-18T15:32:14.214Z", "date_only": false, "value": "2025-12-18T15:32:14.214Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-49083", "record": "CVE-2023-49083", "field": "cveMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2025-12-18T15:32:14.214Z", "date_only": false, "value": "2025-12-18T15:32:14.214Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-49083 / CISA-ADP", "record": "CVE-2023-49083", "field": "containers.adp.1.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2026-02-04T19:22:36.853Z", "date_only": false, "value": "2026-02-04T19:22:36.853Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-23334", "record": "CVE-2024-23334", "field": "cveMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2026-02-04T19:22:36.853Z", "date_only": false, "value": "2026-02-04T19:22:36.853Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-23334 / CVE", "record": "CVE-2024-23334", "field": "containers.adp.0.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2026-11-04T21:08:38.945Z", "date_only": false, "value": "2026-11-04T21:08:38.945Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-1394", "record": "CVE-2024-1394", "field": "cveMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2026-11-04T21:08:38.945Z", "date_only": false, "value": "2026-11-04T21:08:38.945Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-1394 / redhat", "record": "CVE-2024-1394", "field": "containers.cna.providerMetadata.dateUpdated", "linked_record": true}, {"timestamp": "2026-11-05T11:54:46Z", "date_only": false, "value": "2026-11-05T11:54:46+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat", "record": "rhsa-2024:1640", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-11-05T11:54:46Z", "date_only": false, "value": "2026-11-05T11:54:46+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat", "record": "rhsa-2024:1640", "field": "document.tracking.generator.date"}, {"timestamp": "2026-11-05T11:54:46Z", "date_only": false, "value": "2026-11-05T11:54:46+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat", "record": "rhsa-2024:1640", "field": "document.tracking.current_release_date"}], "metrics": {"as_of": "2026-11-06T16:04:06.273Z", "anchors": {"origin": {"timestamp": "2024-04-02T19:34:39Z", "date_only": false, "value": "2024-04-02T19:34:39+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat", "record": "rhsa-2024:1640", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2024-04-02T19:34:39Z", "date_only": false, "value": "2024-04-02T19:34:39+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat", "record": "rhsa-2024:1640", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2025-01-13T09:11:16Z", "date_only": false, "value": "2025-01-13T09:11:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1356", "record": "RHSA-2024:1640", "field": "creation_timestamp", "uuid": "2d7e5e22-134d-47e4-8e15-38619684615e", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1394\n\ud83d\udd39 Description: A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs\u200b. The memory leak happens in github.com/golang-fips/openssl/openssl/rsa.go#L113. The objects leaked are pkey\u200b and ctx\u200b. That function uses named return parameters to free pkey\u200b and ctx\u200b if there is an error initializing the context or setting the different properties. All return statements related to error cases follow the \"return nil, nil, fail(...)\" pattern, meaning that pkey\u200b and ctx\u200b will be nil inside the deferred function that should free them.\n\ud83d\udccf Published: 2024-03-21T12:16:38.790Z\n\ud83d\udccf Modified: 2025-01-13T08:35:31.150Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2024:1462\n2. https://access.redhat.com/errata/RHSA-2024:1468\n3. https://access.redhat.com/errata/RHSA-2024:1472\n4. https://access.redhat.com/errata/RHSA-2024:1501\n5. https://access.redhat.com/errata/RHSA-2024:1502\n6. https://access.redhat.com/errata/RHSA-2024:1561\n7. https://access.redhat.com/errata/RHSA-2024:1563\n8. https://access.redhat.com/errata/RHSA-2024:1566\n9. https://access.redhat.com/errata/RHSA-2024:1567\n10. https://access.redhat.com/errata/RHSA-2024:1574\n11. https://access.redhat.com/errata/RHSA-2024:1640\n12. https://access.redhat.com/errata/RHSA-2024:1644\n13. https://access.redhat.com/errata/RHSA-2024:1646\n14. https://access.redhat.com/errata/RHSA-2024:1763\n15. https://access.redhat.com/errata/RHSA-2024:1897\n16. https://access.redhat.com/errata/RHSA-2024:2562\n17. https://access.redhat.com/errata/RHSA-2024:2568\n18. https://access.redhat.com/errata/RHSA-2024:2569\n19. https://access.redhat.com/errata/RHSA-2024:2729\n20. https://access.redhat.com/errata/RHSA-2024:2730\n21. https://access.redhat.com/errata/RHSA-2024:2767\n22. https://access.redhat.com/errata/RHSA-2024:3265\n23. https://access.redhat.com/errata/RHSA-2024:3352\n24. https://access.redhat.com/errata/RHSA-2024:4146\n25. https://access.redhat.com/errata/RHSA-2024:4371\n26. https://access.redhat.com/errata/RHSA-2024:4378\n27. https://access.redhat.com/errata/RHSA-2024:4379\n28. https://access.redhat.com/errata/RHSA-2024:4502\n29. https://access.redhat.com/errata/RHSA-2024:4581\n30. https://access.redhat.com/errata/RHSA-2024:4591\n31. https://access.redhat.com/errata/RHSA-2024:4672\n32. https://access.redhat.com/errata/RHSA-2024:4699\n33. https://access.redhat.com/errata/RHSA-2024:4761\n34. https://access.redhat.com/errata/RHSA-2024:4762\n35. https://access.redhat.com/errata/RHSA-2024:4960\n36. https://access.redhat.com/errata/RHSA-2024:5258\n37. https://access.redhat.com/errata/RHSA-2024:5634\n38. https://access.redhat.com/errata/RHSA-2024:7262\n39. https://access.redhat.com/security/cve/CVE-2024-1394\n40. https://bugzilla.redhat.com/show_bug.cgi?id=2262921\n41. https://github.com/golang-fips/openssl/commit/85d31d0d257ce842c8a1e63c4d230ae850348136\n42. https://github.com/golang-fips/openssl/security/advisories/GHSA-78hx-gp6g-7mj6\n43. https://github.com/microsoft/go-crypto-openssl/commit/104fe7f6912788d2ad44602f77a0a0a62f1f259f\n44. https://pkg.go.dev/vuln/GO-2024-2660\n45. https://vuln.go.dev/ID/GO-2024-2660.json", "url": "https://t.me/DarkWebInformer_CVEAlerts/1356", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 24672997.0, "hours": 6853.610277777778, "days": 285.5670949074074, "min_seconds": 24672997.0, "max_seconds": 24672997.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-04-02T19:34:39Z", "date_only": false, "value": "2024-04-02T19:34:39+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat", "record": "rhsa-2024:1640", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-01-13T09:11:16Z", "date_only": false, "value": "2025-01-13T09:11:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1356", "record": "RHSA-2024:1640", "field": "creation_timestamp", "uuid": "2d7e5e22-134d-47e4-8e15-38619684615e", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1394\n\ud83d\udd39 Description: A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs\u200b. The memory leak happens in github.com/golang-fips/openssl/openssl/rsa.go#L113. The objects leaked are pkey\u200b and ctx\u200b. That function uses named return parameters to free pkey\u200b and ctx\u200b if there is an error initializing the context or setting the different properties. All return statements related to error cases follow the \"return nil, nil, fail(...)\" pattern, meaning that pkey\u200b and ctx\u200b will be nil inside the deferred function that should free them.\n\ud83d\udccf Published: 2024-03-21T12:16:38.790Z\n\ud83d\udccf Modified: 2025-01-13T08:35:31.150Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2024:1462\n2. https://access.redhat.com/errata/RHSA-2024:1468\n3. https://access.redhat.com/errata/RHSA-2024:1472\n4. https://access.redhat.com/errata/RHSA-2024:1501\n5. https://access.redhat.com/errata/RHSA-2024:1502\n6. https://access.redhat.com/errata/RHSA-2024:1561\n7. https://access.redhat.com/errata/RHSA-2024:1563\n8. https://access.redhat.com/errata/RHSA-2024:1566\n9. https://access.redhat.com/errata/RHSA-2024:1567\n10. https://access.redhat.com/errata/RHSA-2024:1574\n11. https://access.redhat.com/errata/RHSA-2024:1640\n12. https://access.redhat.com/errata/RHSA-2024:1644\n13. https://access.redhat.com/errata/RHSA-2024:1646\n14. https://access.redhat.com/errata/RHSA-2024:1763\n15. https://access.redhat.com/errata/RHSA-2024:1897\n16. https://access.redhat.com/errata/RHSA-2024:2562\n17. https://access.redhat.com/errata/RHSA-2024:2568\n18. https://access.redhat.com/errata/RHSA-2024:2569\n19. https://access.redhat.com/errata/RHSA-2024:2729\n20. https://access.redhat.com/errata/RHSA-2024:2730\n21. https://access.redhat.com/errata/RHSA-2024:2767\n22. https://access.redhat.com/errata/RHSA-2024:3265\n23. https://access.redhat.com/errata/RHSA-2024:3352\n24. https://access.redhat.com/errata/RHSA-2024:4146\n25. https://access.redhat.com/errata/RHSA-2024:4371\n26. https://access.redhat.com/errata/RHSA-2024:4378\n27. https://access.redhat.com/errata/RHSA-2024:4379\n28. https://access.redhat.com/errata/RHSA-2024:4502\n29. https://access.redhat.com/errata/RHSA-2024:4581\n30. https://access.redhat.com/errata/RHSA-2024:4591\n31. https://access.redhat.com/errata/RHSA-2024:4672\n32. https://access.redhat.com/errata/RHSA-2024:4699\n33. https://access.redhat.com/errata/RHSA-2024:4761\n34. https://access.redhat.com/errata/RHSA-2024:4762\n35. https://access.redhat.com/errata/RHSA-2024:4960\n36. https://access.redhat.com/errata/RHSA-2024:5258\n37. https://access.redhat.com/errata/RHSA-2024:5634\n38. https://access.redhat.com/errata/RHSA-2024:7262\n39. https://access.redhat.com/security/cve/CVE-2024-1394\n40. https://bugzilla.redhat.com/show_bug.cgi?id=2262921\n41. https://github.com/golang-fips/openssl/commit/85d31d0d257ce842c8a1e63c4d230ae850348136\n42. https://github.com/golang-fips/openssl/security/advisories/GHSA-78hx-gp6g-7mj6\n43. https://github.com/microsoft/go-crypto-openssl/commit/104fe7f6912788d2ad44602f77a0a0a62f1f259f\n44. https://pkg.go.dev/vuln/GO-2024-2660\n45. https://vuln.go.dev/ID/GO-2024-2660.json", "url": "https://t.me/DarkWebInformer_CVEAlerts/1356", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 81894567.273763, "hours": 22748.490909378612, "days": 947.8537878907755, "min_seconds": 81894567.273763, "max_seconds": 81894567.273763, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-04-02T19:34:39Z", "date_only": false, "value": "2024-04-02T19:34:39+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat", "record": "rhsa-2024:1640", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-06T16:04:06.273Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 57221570.273763, "hours": 15894.880631600834, "days": 662.2866929833681, "min_seconds": 57221570.273763, "max_seconds": 57221570.273763, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-01-13T09:11:16Z", "date_only": false, "value": "2025-01-13T09:11:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1356", "record": "RHSA-2024:1640", "field": "creation_timestamp", "uuid": "2d7e5e22-134d-47e4-8e15-38619684615e", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1394\n\ud83d\udd39 Description: A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs\u200b. The memory leak happens in github.com/golang-fips/openssl/openssl/rsa.go#L113. The objects leaked are pkey\u200b and ctx\u200b. That function uses named return parameters to free pkey\u200b and ctx\u200b if there is an error initializing the context or setting the different properties. All return statements related to error cases follow the \"return nil, nil, fail(...)\" pattern, meaning that pkey\u200b and ctx\u200b will be nil inside the deferred function that should free them.\n\ud83d\udccf Published: 2024-03-21T12:16:38.790Z\n\ud83d\udccf Modified: 2025-01-13T08:35:31.150Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2024:1462\n2. https://access.redhat.com/errata/RHSA-2024:1468\n3. https://access.redhat.com/errata/RHSA-2024:1472\n4. https://access.redhat.com/errata/RHSA-2024:1501\n5. https://access.redhat.com/errata/RHSA-2024:1502\n6. https://access.redhat.com/errata/RHSA-2024:1561\n7. https://access.redhat.com/errata/RHSA-2024:1563\n8. https://access.redhat.com/errata/RHSA-2024:1566\n9. https://access.redhat.com/errata/RHSA-2024:1567\n10. https://access.redhat.com/errata/RHSA-2024:1574\n11. https://access.redhat.com/errata/RHSA-2024:1640\n12. https://access.redhat.com/errata/RHSA-2024:1644\n13. https://access.redhat.com/errata/RHSA-2024:1646\n14. https://access.redhat.com/errata/RHSA-2024:1763\n15. https://access.redhat.com/errata/RHSA-2024:1897\n16. https://access.redhat.com/errata/RHSA-2024:2562\n17. https://access.redhat.com/errata/RHSA-2024:2568\n18. https://access.redhat.com/errata/RHSA-2024:2569\n19. https://access.redhat.com/errata/RHSA-2024:2729\n20. https://access.redhat.com/errata/RHSA-2024:2730\n21. https://access.redhat.com/errata/RHSA-2024:2767\n22. https://access.redhat.com/errata/RHSA-2024:3265\n23. https://access.redhat.com/errata/RHSA-2024:3352\n24. https://access.redhat.com/errata/RHSA-2024:4146\n25. https://access.redhat.com/errata/RHSA-2024:4371\n26. https://access.redhat.com/errata/RHSA-2024:4378\n27. https://access.redhat.com/errata/RHSA-2024:4379\n28. https://access.redhat.com/errata/RHSA-2024:4502\n29. https://access.redhat.com/errata/RHSA-2024:4581\n30. https://access.redhat.com/errata/RHSA-2024:4591\n31. https://access.redhat.com/errata/RHSA-2024:4672\n32. https://access.redhat.com/errata/RHSA-2024:4699\n33. https://access.redhat.com/errata/RHSA-2024:4761\n34. https://access.redhat.com/errata/RHSA-2024:4762\n35. https://access.redhat.com/errata/RHSA-2024:4960\n36. https://access.redhat.com/errata/RHSA-2024:5258\n37. https://access.redhat.com/errata/RHSA-2024:5634\n38. https://access.redhat.com/errata/RHSA-2024:7262\n39. https://access.redhat.com/security/cve/CVE-2024-1394\n40. https://bugzilla.redhat.com/show_bug.cgi?id=2262921\n41. https://github.com/golang-fips/openssl/commit/85d31d0d257ce842c8a1e63c4d230ae850348136\n42. https://github.com/golang-fips/openssl/security/advisories/GHSA-78hx-gp6g-7mj6\n43. https://github.com/microsoft/go-crypto-openssl/commit/104fe7f6912788d2ad44602f77a0a0a62f1f259f\n44. https://pkg.go.dev/vuln/GO-2024-2660\n45. https://vuln.go.dev/ID/GO-2024-2660.json", "url": "https://t.me/DarkWebInformer_CVEAlerts/1356", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-06T16:04:06.273Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}
