cve/2024/CVE-2024-24783.md
2024-06-07 04:52:01 +00:00

870 B

CVE-2024-24783

Description

Verifying a certificate chain which contains a certificate with an unknown public key algorithm will cause Certificate.Verify to panic. This affects all crypto/tls clients, and servers that set Config.ClientAuth to VerifyClientCertIfGiven or RequireAndVerifyClientCert. The default behavior is for TLS servers to not verify client certificates.

POC

Reference

No PoCs from references.

Github