CVE-2024-24783
- Source
- https://cve.org/CVERecord?id=CVE-2024-24783
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-24783.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2024-24783
- Aliases
- Downstream
- Related
- Published
- 2024-03-05T23:15:07Z
- Modified
- 2026-02-05T15:13:49.442684Z
- Summary
- [none]
- Details
-
Verifying a certificate chain which contains a certificate with an unknown public key algorithm will cause Certificate.Verify to panic. This affects all crypto/tls clients, and servers that set Config.ClientAuth to VerifyClientCertIfGiven or RequireAndVerifyClientCert. The default behavior is for TLS servers to not verify client certificates.
- References