Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2024-34155
HistorySep 06, 2024 - 9:15 p.m.

CVE-2024-34155

2024-09-0621:15:11
Alpine Linux Development Team
security.alpinelinux.org
1
go source code
parsing
nested literals
stack exhaustion
unix

AI Score

6.8

Confidence

High

EPSS

0

Percentile

16.3%

Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion.

OSVersionArchitecturePackageVersionFilename
Alpineedge-communitynoarchgo< 1.23.1-r0UNKNOWN
Alpine3.20-communitynoarchgo< 1.22.7-r0UNKNOWN

AI Score

6.8

Confidence

High

EPSS

0

Percentile

16.3%