Executive Summary

A flaw in Golang’s FIPS‑mode OpenSSL implementation can cause an uninitialized buffer length variable to be returned as zero, enabling attackers to inject zeroed buffers. This can lead to false positive hash comparisons, zeroed derived keys, and potentially compromise the Go TLS stack’s cryptographic integrity, authentication, and confidentiality.

---

Authoritative CVE Metadata - CVSS Base Score: 6.5 (MEDIUM) - Published: 2024-10-01T19:15:09.793 - Last Modified: 2026-09-21T18:17:05.100

Original Description: A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted computed hmac sum to an untrusted input sum if an attacker can send a zeroed buffer in place of a pre-computed sum.  It is also possible to force a derived key to be all zeros instead of an unpredictable value.  This may have follow-on implications for the Go TLS stack.

"I have been impressed with the urgency of doing. Knowing is not enough; we must apply. Being willing is not enough; we must do."

— Leonardo da Vinci