Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509
CVE-2024-45341 is a vulnerability in Microsoft products related to the usage of IPv6 zone IDs that can bypass URI name constraints in the crypto/x509 component. The vulnerability affects certain Microsoft and Azure Linux versions, including CBL Mariner 2.0 and 3.0. No CVSS score or detailed impact information is provided, and there are no known exploits in the wild. Patch or remediation status is not confirmed from the available data.
AI Analysis
Technical Summary
This vulnerability involves the handling of IPv6 zone IDs within the crypto/x509 library, allowing bypass of URI name constraints. The affected products include Microsoft and Azure Linux distributions such as CBL Mariner versions 2.0 and 3.0. The advisory does not provide detailed technical or impact information, nor does it specify if a patch is available.
Potential Impact
The impact details are not explicitly provided. The vulnerability could potentially allow bypassing URI name constraints, which might affect certificate validation processes. No known exploitation or active attacks have been reported.
Mitigation Recommendations
Patch status is not yet confirmed — check the Microsoft Security Response Center advisory for current remediation guidance. No specific mitigation or workaround information is available from the provided data.
Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509
Description
CVE-2024-45341 is a vulnerability in Microsoft products related to the usage of IPv6 zone IDs that can bypass URI name constraints in the crypto/x509 component. The vulnerability affects certain Microsoft and Azure Linux versions, including CBL Mariner 2.0 and 3.0. No CVSS score or detailed impact information is provided, and there are no known exploits in the wild. Patch or remediation status is not confirmed from the available data.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves the handling of IPv6 zone IDs within the crypto/x509 library, allowing bypass of URI name constraints. The affected products include Microsoft and Azure Linux distributions such as CBL Mariner versions 2.0 and 3.0. The advisory does not provide detailed technical or impact information, nor does it specify if a patch is available.
Potential Impact
The impact details are not explicitly provided. The vulnerability could potentially allow bypassing URI name constraints, which might affect certificate validation processes. No known exploitation or active attacks have been reported.
Mitigation Recommendations
Patch status is not yet confirmed — check the Microsoft Security Response Center advisory for current remediation guidance. No specific mitigation or workaround information is available from the provided data.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_vex
- Csaf Version
- 2.0
- Publisher
- Microsoft Security Response Center
- Advisory Id
- msrc_CVE-2024-45341
- Cve Count
- 1
Threat ID: 6a998f61acd9273b491933fe
Added to database: 09/03/2026, 15:16:49 UTC
Last enriched: 09/07/2026, 19:57:22 UTC
Last updated: 09/10/2026, 19:36:48 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.