CVE-2024-24788 Malformed DNS message can cause infinite loop in net

2024-05-0815:31:11

www.cve.org

dns message

infinite loop

net

query

lookup functions

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.3%

JSON

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop.

CNA Affected

[
  {
    "vendor": "Go standard library",
    "product": "net",
    "collectionURL": "https://pkg.go.dev",
    "packageName": "net",
    "versions": [
      {
        "version": "1.22.0-0",
        "lessThan": "1.22.3",
        "status": "affected",
        "versionType": "semver"
      }
    ],
    "programRoutines": [
      {
        "name": "extractExtendedRCode"
      },
      {
        "name": "Dial"
      },
      {
        "name": "DialTimeout"
      },
      {
        "name": "Dialer.Dial"
      },
      {
        "name": "Dialer.DialContext"
      },
      {
        "name": "Listen"
      },
      {
        "name": "ListenConfig.Listen"
      },
      {
        "name": "ListenConfig.ListenPacket"
      },
      {
        "name": "ListenPacket"
      },
      {
        "name": "LookupAddr"
      },
      {
        "name": "LookupCNAME"
      },
      {
        "name": "LookupHost"
      },
      {
        "name": "LookupIP"
      },
      {
        "name": "LookupMX"
      },
      {
        "name": "LookupNS"
      },
      {
        "name": "LookupSRV"
      },
      {
        "name": "LookupTXT"
      },
      {
        "name": "ResolveIPAddr"
      },
      {
        "name": "ResolveTCPAddr"
      },
      {
        "name": "ResolveUDPAddr"
      },
      {
        "name": "Resolver.LookupAddr"
      },
      {
        "name": "Resolver.LookupCNAME"
      },
      {
        "name": "Resolver.LookupHost"
      },
      {
        "name": "Resolver.LookupIP"
      },
      {
        "name": "Resolver.LookupIPAddr"
      },
      {
        "name": "Resolver.LookupMX"
      },
      {
        "name": "Resolver.LookupNS"
      },
      {
        "name": "Resolver.LookupNetIP"
      },
      {
        "name": "Resolver.LookupSRV"
      },
      {
        "name": "Resolver.LookupTXT"
      }
    ],
    "defaultStatus": "unaffected"
  }
]