---
id: CVE-2024-1394
aliases:
  - GHSA-78hx-gp6g-7mj6
  - GO-2024-2660
title: Memory leaks in code encrypting and verifying RSA payloads
summary: Memory leaks in code encrypting and verifying RSA payloads
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
vendor: golang-fips
product: github.com/golang-fips/go
ecosystem: go
affected:
  - github.com/golang-fips/go <= 1.22.1
  - github.com/golang-fips/openssl/v2 < 2.0.1
  - github.com/microsoft/go-crypto-openssl <= 0.2.8
  - github.com/microsoft/go-crypto-openssl/openssl < 0.2.9
patched:
  - github.com/golang-fips/openssl/v2 2.0.1
  - github.com/microsoft/go-crypto-openssl/openssl 0.2.9
published: '2024-03-20'
updated: '2026-07-08'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-78hx-gp6g-7mj6'
references:
  - url: >-
      https://github.com/golang-fips/openssl/security/advisories/GHSA-78hx-gp6g-7mj6
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2024-1394'
  - url: >-
      https://github.com/microsoft/go-crypto-openssl/commit/104fe7f6912788d2ad44602f77a0a0a62f1f259f
  - url: >-
      https://github.com/golang-fips/openssl/commit/85d31d0d257ce842c8a1e63c4d230ae850348136
  - url: 'https://access.redhat.com/errata/RHSA-2024:1462'
  - url: 'https://access.redhat.com/errata/RHSA-2024:4378'
  - url: 'https://access.redhat.com/errata/RHSA-2024:4379'
  - url: 'https://access.redhat.com/errata/RHSA-2024:4502'
  - url: 'https://access.redhat.com/errata/RHSA-2024:4581'
  - url: 'https://access.redhat.com/errata/RHSA-2024:4591'
  - url: 'https://access.redhat.com/errata/RHSA-2024:4672'
  - url: 'https://access.redhat.com/errata/RHSA-2024:4699'
  - url: 'https://access.redhat.com/errata/RHSA-2024:4761'
  - url: 'https://access.redhat.com/errata/RHSA-2024:4762'
  - url: 'https://access.redhat.com/errata/RHSA-2024:4960'
  - url: 'https://access.redhat.com/errata/RHSA-2024:5258'
  - url: 'https://access.redhat.com/errata/RHSA-2024:5634'
  - url: 'https://access.redhat.com/errata/RHSA-2024:7262'
  - url: 'https://access.redhat.com/security/cve/CVE-2024-1394'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2262921'
  - url: 'https://github.com/golang-fips/openssl'
  - url: 'https://github.com/golang-fips/openssl/releases/tag/v2.0.1'
  - url: 'https://github.com/microsoft/go-crypto-openssl/releases/tag/v0.2.9'
  - url: 'https://pkg.go.dev/vuln/GO-2024-2660'
  - url: 'https://vuln.go.dev/ID/GO-2024-2660.json'
  - url: 'https://access.redhat.com/errata/RHSA-2024:1468'
  - url: 'https://access.redhat.com/errata/RHSA-2024:1472'
  - url: 'https://access.redhat.com/errata/RHSA-2024:1501'
  - url: 'https://access.redhat.com/errata/RHSA-2024:1502'
  - url: 'https://access.redhat.com/errata/RHSA-2024:1561'
  - url: 'https://access.redhat.com/errata/RHSA-2024:1563'
  - url: 'https://access.redhat.com/errata/RHSA-2024:1566'
  - url: 'https://access.redhat.com/errata/RHSA-2024:1567'
  - url: 'https://access.redhat.com/errata/RHSA-2024:1574'
  - url: 'https://access.redhat.com/errata/RHSA-2024:1640'
  - url: 'https://access.redhat.com/errata/RHSA-2024:1644'
  - url: 'https://access.redhat.com/errata/RHSA-2024:1646'
  - url: 'https://access.redhat.com/errata/RHSA-2024:1763'
  - url: 'https://access.redhat.com/errata/RHSA-2024:1897'
  - url: 'https://access.redhat.com/errata/RHSA-2024:2562'
  - url: 'https://access.redhat.com/errata/RHSA-2024:2568'
  - url: 'https://access.redhat.com/errata/RHSA-2024:2569'
  - url: 'https://access.redhat.com/errata/RHSA-2024:2729'
  - url: 'https://access.redhat.com/errata/RHSA-2024:2730'
  - url: 'https://access.redhat.com/errata/RHSA-2024:2767'
  - url: 'https://access.redhat.com/errata/RHSA-2024:3265'
  - url: 'https://access.redhat.com/errata/RHSA-2024:3352'
  - url: 'https://access.redhat.com/errata/RHSA-2024:4146'
  - url: 'https://access.redhat.com/errata/RHSA-2024:4371'
tags:
  - osv
  - go
epss: 0.01533
epssPercentile: 0.73713
ingestedAt: '2026-07-09T18:56:36.202Z'
---

## Overview

Using crafted public RSA keys which are not compliant with SP 800-56B can cause a small memory leak when encrypting and verifying payloads.

An attacker can leverage this flaw to gradually erode available memory to the point where the host crashes for lack of resources. Upon restart the attacker would have to begin again, but nevertheless there is the potential to deny service.

## Affected packages

- `github.com/golang-fips/go <= 1.22.1`
- `github.com/golang-fips/openssl/v2 < 2.0.1`
- `github.com/microsoft/go-crypto-openssl <= 0.2.8`
- `github.com/microsoft/go-crypto-openssl/openssl < 0.2.9`

## Remediation

Upgrade to a patched release:

- `github.com/golang-fips/openssl/v2 2.0.1`
- `github.com/microsoft/go-crypto-openssl/openssl 0.2.9`