Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2024-24786
HistoryMar 05, 2024 - 11:15 p.m.

CVE-2024-24786

2024-03-0523:15:07
Alpine Linux Development Team
security.alpinelinux.org
7
protojson
unmarshal
infinite loop
unmarshaling
json
google.protobuf.any
unmarshaloptions
discardunknown
unix

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.6%

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.

OSVersionArchitecturePackageVersionFilename
Alpineedge-communitynoarchbuildah< 1.35.4-r0UNKNOWN
Alpine3.20-communitynoarchbuildah< 1.35.4-r0UNKNOWN