CVE catalog

CVE-2024-45340

UBUNTU-CVE-2024-45340

Severity: High · CVSS 7.7CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
Published: Jan 24, 2025, 12:00:00 AM UTC
Updated: Oct 19, 2026, 5:00:11 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.71% · Oct 25, 2026

Credentials provided via the new GOAUTH feature were not being properly segmented by domain, allowing a malicious server to request credentials they should not have access to. By default, unless otherwise set, this only affected credentials stored in the users .netrc file.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Ubuntu	golang-1.10	14.04	`1.10.4-2ubuntu1~14.04.1`	vulnerable
Ubuntu	golang-1.10	16.04	`1.10.4-2ubuntu1~16.04.1`	vulnerable
Ubuntu	golang-1.10	16.04	`1.10.4-2ubuntu1~16.04.2`	vulnerable
Ubuntu	golang-1.6	16.04	`1.6-0ubuntu1`	vulnerable
Ubuntu	golang-1.6	16.04	`1.6-0ubuntu2`	vulnerable
Ubuntu	golang-1.6	16.04	`1.6-0ubuntu3`	vulnerable
Ubuntu	golang-1.6	16.04	`1.6-0ubuntu4`	vulnerable
Ubuntu	golang-1.6	16.04	`1.6-0ubuntu5`	vulnerable
Ubuntu	golang-1.6	16.04	`1.6.1-0ubuntu1`	vulnerable
Ubuntu	golang-1.6	16.04	`1.6.2-0ubuntu5~16.04`	vulnerable
Ubuntu	golang-1.6	16.04	`1.6.2-0ubuntu5~16.04.2`	vulnerable
Ubuntu	golang-1.6	16.04	`1.6.2-0ubuntu5~16.04.3`	vulnerable
Ubuntu	golang-1.6	16.04	`1.6.2-0ubuntu5~16.04.4`	vulnerable
Ubuntu	golang-1.13	pro	`1.13.8-1ubuntu2`	vulnerable
Ubuntu	golang-1.13	pro	`1.13.8-1ubuntu2.22.04.1`	vulnerable
Ubuntu	golang-1.13	pro	`1.13.8-1ubuntu2.22.04.1+esm1`	vulnerable
Ubuntu	golang-1.13	pro	`1.13.8-1ubuntu2.22.04.2`	vulnerable
Ubuntu	golang-1.18	pro	`1.18.1-1ubuntu1~18.04.3`	vulnerable
Ubuntu	golang-1.18	pro	`1.18.1-1ubuntu1~18.04.4`	vulnerable
Ubuntu	golang-1.18	pro	`1.18.1-1ubuntu1~18.04.4+esm1`	vulnerable
Ubuntu	golang-1.10	18.04	`1.10~rc1-1`	vulnerable
Ubuntu	golang-1.10	18.04	`1.10~rc1-1ubuntu1`	vulnerable
Ubuntu	golang-1.10	18.04	`1.10~rc1-2ubuntu1`	vulnerable
Ubuntu	golang-1.10	18.04	`1.10~rc2-1ubuntu1`	vulnerable
Ubuntu	golang-1.10	18.04	`1.10-1ubuntu1`	vulnerable
Ubuntu	golang-1.10	18.04	`1.10.1-1ubuntu2`	vulnerable
Ubuntu	golang-1.10	18.04	`1.10.4-2ubuntu1~18.04.1`	vulnerable
Ubuntu	golang-1.10	18.04	`1.10.4-2ubuntu1~18.04.2`	vulnerable
Ubuntu	golang-1.13	pro	`1.13.8-1ubuntu1~18.04.2`	vulnerable
Ubuntu	golang-1.13	pro	`1.13.8-1ubuntu1~18.04.3`	vulnerable
Ubuntu	golang-1.13	pro	`1.13.8-1ubuntu1~18.04.4`	vulnerable
Ubuntu	golang-1.13	pro	`1.13.8-1ubuntu1~18.04.4+esm1`	vulnerable
Ubuntu	golang-1.16	pro	`1.16.2-0ubuntu1~20.04`	vulnerable
Ubuntu	golang-1.16	pro	`1.16.2-0ubuntu1~20.04.1`	vulnerable
Ubuntu	golang-1.16	pro	`1.16.2-0ubuntu1~20.04.1+esm1`	vulnerable
Ubuntu	golang-1.18	pro	`1.18.1-1ubuntu1~18.04.3`	vulnerable
Ubuntu	golang-1.18	pro	`1.18.1-1ubuntu1~18.04.4`	vulnerable
Ubuntu	golang-1.18	pro	`1.18.1-1ubuntu1~18.04.4+esm1`	vulnerable
Ubuntu	golang-1.8	18.04	`1.8.3-2ubuntu1`	vulnerable
Ubuntu	golang-1.8	18.04	`1.8.3-2ubuntu1.18.04.1`	vulnerable
Ubuntu	golang-1.9	18.04	`1.9.1-2ubuntu1`	vulnerable
Ubuntu	golang-1.9	18.04	`1.9.2-1ubuntu1`	vulnerable
Ubuntu	golang-1.9	18.04	`1.9.2-3ubuntu1`	vulnerable
Ubuntu	golang-1.9	18.04	`1.9.3-1ubuntu1`	vulnerable
Ubuntu	golang-1.9	18.04	`1.9.4-1ubuntu1`	vulnerable
Ubuntu	golang-1.13	20.04	`1.13.1-1ubuntu1`	vulnerable
Ubuntu	golang-1.13	20.04	`1.13.3-1ubuntu1`	vulnerable
Ubuntu	golang-1.13	20.04	`1.13.4-1ubuntu1`	vulnerable
Ubuntu	golang-1.13	20.04	`1.13.5-1ubuntu1`	vulnerable
Ubuntu	golang-1.13	20.04	`1.13.6-1ubuntu1`	vulnerable
Ubuntu	golang-1.13	20.04	`1.13.6-2ubuntu1`	vulnerable
Ubuntu	golang-1.13	20.04	`1.13.7-1ubuntu1`	vulnerable
Ubuntu	golang-1.13	20.04	`1.13.8-1ubuntu1`	vulnerable
Ubuntu	golang-1.13	20.04	`1.13.8-1ubuntu1.1`	vulnerable
Ubuntu	golang-1.13	20.04	`1.13.8-1ubuntu1.2`	vulnerable
Ubuntu	golang-1.14	20.04	`1.14~beta1-1`	vulnerable
Ubuntu	golang-1.14	20.04	`1.14~beta1-2`	vulnerable
Ubuntu	golang-1.14	20.04	`1.14~rc1-1`	vulnerable
Ubuntu	golang-1.14	20.04	`1.14-1`	vulnerable
Ubuntu	golang-1.14	20.04	`1.14.1-1`	vulnerable
Ubuntu	golang-1.14	20.04	`1.14.2-1`	vulnerable
Ubuntu	golang-1.14	20.04	`1.14.2-1ubuntu1`	vulnerable
Ubuntu	golang-1.14	20.04	`1.14.3-2ubuntu2~20.04.1`	vulnerable
Ubuntu	golang-1.14	20.04	`1.14.3-2ubuntu2~20.04.2`	vulnerable
Ubuntu	golang-1.16	pro	`1.16.2-0ubuntu1~20.04`	vulnerable
Ubuntu	golang-1.16	pro	`1.16.2-0ubuntu1~20.04.1`	vulnerable
Ubuntu	golang-1.16	pro	`1.16.2-0ubuntu1~20.04.1+esm1`	vulnerable
Ubuntu	golang-1.18	20.04	`1.18.1-1ubuntu1~20.04.1`	vulnerable
Ubuntu	golang-1.18	20.04	`1.18.1-1ubuntu1~20.04.2`	vulnerable
Ubuntu	golang-1.18	20.04	`1.18.1-1ubuntu1~20.04.3`	vulnerable
Ubuntu	golang-1.20	20.04	`1.20.3-1ubuntu0.1~20.04`	vulnerable
Ubuntu	golang-1.20	20.04	`1.20.3-1ubuntu0.1~20.04.1`	vulnerable
Ubuntu	golang-1.21	20.04	`1.21.1-1~ubuntu20.04.1`	vulnerable
Ubuntu	golang-1.21	20.04	`1.21.1-1~ubuntu20.04.2`	vulnerable
Ubuntu	golang-1.21	20.04	`1.21.1-1~ubuntu20.04.3`	vulnerable
Ubuntu	golang-1.22	20.04	`1.22.2-2~20.04.1`	vulnerable
Ubuntu	golang-1.22	20.04	`1.22.2-2~20.04.2`	vulnerable
Ubuntu	golang-1.22	20.04	`1.22.2-2~20.04.3`	vulnerable
Ubuntu	golang-1.17	22.04	`1.17-1ubuntu2`	vulnerable
Ubuntu	golang-1.17	22.04	`1.17.3-1ubuntu1`	vulnerable
Ubuntu	golang-1.17	22.04	`1.17.3-1ubuntu2`	vulnerable
Ubuntu	golang-1.17	22.04	`1.17.13-3ubuntu1`	vulnerable
Ubuntu	golang-1.17	22.04	`1.17.13-3ubuntu1.2`	vulnerable
Ubuntu	golang-1.17	22.04	`1.17.13-3ubuntu1.3`	vulnerable
Ubuntu	golang-1.18	22.04	`1.18~beta1-0ubuntu1`	vulnerable
Ubuntu	golang-1.18	22.04	`1.18~beta2-1ubuntu1`	vulnerable
Ubuntu	golang-1.18	22.04	`1.18~beta2-1ubuntu2`	vulnerable
Ubuntu	golang-1.18	22.04	`1.18~rc1-1ubuntu1`	vulnerable
Ubuntu	golang-1.18	22.04	`1.18-1ubuntu1`	vulnerable
Ubuntu	golang-1.18	22.04	`1.18.1-1ubuntu1`	vulnerable
Ubuntu	golang-1.18	22.04	`1.18.1-1ubuntu1.1`	vulnerable
Ubuntu	golang-1.18	22.04	`1.18.1-1ubuntu1.2`	vulnerable
Ubuntu	golang-1.18	22.04	`1.18.1-1ubuntu1.3`	vulnerable
Ubuntu	golang-1.20	22.04	`1.20.3-1ubuntu0.1~22.04`	vulnerable
Ubuntu	golang-1.20	22.04	`1.20.3-1ubuntu0.1~22.04.1`	vulnerable
Ubuntu	golang-1.21	22.04	`1.21.1-1~ubuntu22.04.1`	vulnerable
Ubuntu	golang-1.21	22.04	`1.21.1-1~ubuntu22.04.2`	vulnerable
Ubuntu	golang-1.21	22.04	`1.21.1-1~ubuntu22.04.3`	vulnerable
Ubuntu	golang-1.21	22.04	`1.21.1-1~ubuntu22.04.4`	vulnerable
Ubuntu	golang-1.13	pro	`1.13.8-1ubuntu2`	vulnerable
Ubuntu	golang-1.13	pro	`1.13.8-1ubuntu2.22.04.1`	vulnerable
Ubuntu	golang-1.13	pro	`1.13.8-1ubuntu2.22.04.1+esm1`	vulnerable
Ubuntu	golang-1.13	pro	`1.13.8-1ubuntu2.22.04.2`	vulnerable
Ubuntu	golang-1.21	24.04	`1.21.1-1`	vulnerable
Ubuntu	golang-1.21	24.04	`1.21.3-1`	vulnerable
Ubuntu	golang-1.21	24.04	`1.21.4-1`	vulnerable
Ubuntu	golang-1.21	24.04	`1.21.5-1`	vulnerable
Ubuntu	golang-1.21	24.04	`1.21.6-1`	vulnerable
Ubuntu	golang-1.21	24.04	`1.21.7-1`	vulnerable
Ubuntu	golang-1.21	24.04	`1.21.7-2`	vulnerable
Ubuntu	golang-1.21	24.04	`1.21.8-1`	vulnerable
Ubuntu	golang-1.21	24.04	`1.21.8-1build1`	vulnerable
Ubuntu	golang-1.21	24.04	`1.21.9-1`	vulnerable
Ubuntu	golang-1.21	24.04	`1.21.9-1ubuntu0.1`	vulnerable
Ubuntu	golang-1.23	24.04	`1.23.1-1~24.04`	vulnerable
Ubuntu	golang-1.23	24.04	`1.23.1-1~24.04.1`	vulnerable
Ubuntu	golang-1.24	24.04	`1.24.4-1ubuntu1~24.04.1`	vulnerable
Ubuntu	golang-1.24	24.04	`1.24.4-1ubuntu1~24.04.2`	vulnerable
Ubuntu	golang-1.24	24.04	`1.24.13-2~24.04.1`	vulnerable
Ubuntu	golang-1.23	25.10	`1.23.8-1`	vulnerable
Ubuntu	golang-1.23	25.10	`1.23.10-1`	vulnerable
Ubuntu	golang-1.23	25.10	`1.23.10-1ubuntu0.2`	vulnerable
Ubuntu	golang-1.24	25.10	`1.24.2-1`	vulnerable
Ubuntu	golang-1.24	25.10	`1.24.2-2`	vulnerable
Ubuntu	golang-1.24	25.10	`1.24.4-1`	vulnerable
Ubuntu	golang-1.24	25.10	`1.24.4-1ubuntu1`	vulnerable
Ubuntu	golang-1.23	26.04	`1.23.10-1`	vulnerable
Ubuntu	golang-1.24	26.04	`1.24.4-1ubuntu1`	vulnerable
Ubuntu	golang-1.24	26.04	`1.24.9-1`	vulnerable
Ubuntu	golang-1.24	26.04	`1.24.13-2`	vulnerable
Debian	golang-1.24	13	`1.24~rc2-1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	golang-1.24	deb	13	`1.24~rc2-1`	Not reported	DEBIAN-CVE-2024-45340	Not reported

OpenFactory catalog packages

[Debian 13 (Trixie)]

[golang-1.24]Fixed
Details (2)
- 1.24.4-1 · all · trixie
  Fixed · Fixed: 1.24~rc2-1
  pypi · golang-1.24 · debian · 13
- 1.24.4-1 · all · trixie
  Fixed · Fixed: 1.24~rc2-1
  pypi · golang-1.24 · debian · 13
[golang-1.24-doc]Fixed
Source package: [golang-1.24]
Details (2)
- 1.24.4-1 · all · trixie
  Fixed · Fixed: 1.24~rc2-1
  pypi · golang-1.24 · debian · 13
- 1.24.4-1 · all · trixie
  Fixed · Fixed: 1.24~rc2-1
  pypi · golang-1.24 · debian · 13
[golang-1.24-go]Fixed
Source package: [golang-1.24]
Details (2)
- 1.24.4-1 · amd64 · trixie
  Fixed · Fixed: 1.24~rc2-1
  pypi · golang-1.24 · debian · 13
- 1.24.4-1 · arm64 · trixie
  Fixed · Fixed: 1.24~rc2-1
  pypi · golang-1.24 · debian · 13
[golang-1.24-src]Fixed
Source package: [golang-1.24]
Details (2)
- 1.24.4-1 · all · trixie
  Fixed · Fixed: 1.24~rc2-1
  pypi · golang-1.24 · debian · 13
- 1.24.4-1 · all · trixie
  Fixed · Fixed: 1.24~rc2-1
  pypi · golang-1.24 · debian · 13

Observed: Oct 26, 2026, 11:23:39 PM UTC

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]