Lucene search
K

CVE-2024-34155

🗓️ 06 Sep 2024 20:42:42Reported by GoType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 324 Views

Calling Parse functions on deeply nested Go source code can cause a panic due to stack exhaustio

Related
Affected
Refs
Social
ReporterTitlePublishedViews
Family
IBM Security Bulletins
Security Bulletin: Multiple Vulnerabilities in IBM API Connect
15 Mar 202500:18
ibm
IBM Security Bulletins
Security Bulletin: IBM DataPower Operator vulnerable to DoS due to use of Go (CVE-2024-34155, CVE-2024-34156)
28 Jan 202522:08
ibm
IBM Security Bulletins
Security Bulletin: IBM Storage Ceph contains vulnerabilities found in Golang (CVE-2024-24785 CVE-2024-24784 CVE-2024-24783 CVE-2024-24788 CVE-2024-24789 CVE-2024-24790 CVE-2024-6104 CVE-2024-24791 CVE-2024-34155 CVE-2024-34156)
7 Jul 202520:03
ibm
IBM Security Bulletins
Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image
25 Sep 202413:30
ibm
IBM Security Bulletins
Security Bulletin: IBM Concert Software is vulnerable to multiple issues
7 Mar 202516:09
ibm
IBM Security Bulletins
Security Bulletin: Multiple Vulnerabilities in IBM API Connect
19 Dec 202416:32
ibm
IBM Security Bulletins
Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFix for Junuary 2025.
7 Feb 202518:48
ibm
IBM Security Bulletins
Security Bulletin: IBM Storage Protect Server is susceptible to vulnerability in Golang Go (CVE-2024-34158, CVE-2024-34155, CVE-2024-34156).
1 Apr 202503:37
ibm
IBM Security Bulletins
Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image
17 Jan 202509:14
ibm
IBM Security Bulletins
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a denial of service in Golang Go [CVE-2024-34155]
2 Apr 202517:26
ibm
Rows per page
[
  {
    "vendor": "Go standard library",
    "product": "go/parser",
    "collectionURL": "https://pkg.go.dev",
    "packageName": "go/parser",
    "versions": [
      {
        "version": "0",
        "lessThan": "1.22.7",
        "status": "affected",
        "versionType": "semver"
      },
      {
        "version": "1.23.0-0",
        "lessThan": "1.23.1",
        "status": "affected",
        "versionType": "semver"
      }
    ],
    "programRoutines": [
      {
        "name": "parser.parseLiteralValue"
      },
      {
        "name": "ParseDir"
      },
      {
        "name": "ParseExpr"
      },
      {
        "name": "ParseExprFrom"
      },
      {
        "name": "ParseFile"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

15 Apr 2026 00:35Current
6.8Medium risk
Vulners AI Score6.8
CVSS 3.14.3
EPSS0.00081
SSVC
324