CVE-2024-1394

Summary

CVE-2024-1394 is a vulnerability that affects Golang, specifically the RSA encrypting/decrypting code. This vulnerability is caused by a memory leak in the code, which can potentially lead to a resource exhaustion issue when an attacker controls the inputs. The leaked objects are pkey and ctx, and they are not properly freed in error cases. Remediation for this vulnerability involves updating to a patched version of Golang that addresses the memory leak issue. If left unpatched, this vulnerability poses a high danger to organizations as it can be exploited remotely without requiring any user interaction, potentially leading to denial of service attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.