CVE-2024-56138

Summary

CVE-2024-56138 is a vulnerability affecting the notion-go library used for signing and verifying OCI artifacts. During the timestamp signature generation process, this library fails to verify the revocation status of the certificates used, creating a potential Man-in-The-Middle attack vector. An attacker could exploit this issue by introducing a compromised, intermediate, or revoked leaf certificate, generating a malicious countersignature, and causing denial-of-service scenarios, particularly in CI/CD environments. This vulnerability has been addressed in version 1.3.0-rc.2, and all users are advised to upgrade. No known workarounds exist for this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.