CVE-2024-34155

2024-09-0621:15:11

Debian Security Bug Tracker

security-tracker.debian.org

go source code

parse functions

deeply nested literals

stack exhaustion panic

cve-2024-34155

unix

AI Score

6.8

Confidence

High

EPSS

Percentile

16.3%

JSON

Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion.

OSVersionArchitecturePackageVersionFilename
Debian11allgolang-1.15<= 1.15.15-1~deb11u4golang-1.15_1.15.15-1~deb11u4_all.deb
Debian12allgolang-1.19<= 1.19.8-2golang-1.19_1.19.8-2_all.deb
Debian999allgolang-1.22< 1.22.7-1golang-1.22_1.22.7-1_all.deb
Debian13allgolang-1.22< 1.22.7-1golang-1.22_1.22.7-1_all.deb
Debian999allgolang-1.23< 1.23.1-1golang-1.23_1.23.1-1_all.deb
Debian13allgolang-1.23< 1.23.1-1golang-1.23_1.23.1-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	11	all	golang-1.15	<= 1.15.15-1~deb11u4	golang-1.15_1.15.15-1~deb11u4_all.deb
Debian	12	all	golang-1.19	<= 1.19.8-2	golang-1.19_1.19.8-2_all.deb
Debian	999	all	golang-1.22	< 1.22.7-1	golang-1.22_1.22.7-1_all.deb
Debian	13	all	golang-1.22	< 1.22.7-1	golang-1.22_1.22.7-1_all.deb
Debian	999	all	golang-1.23	< 1.23.1-1	golang-1.23_1.23.1-1_all.deb
Debian	13	all	golang-1.23	< 1.23.1-1	golang-1.23_1.23.1-1_all.deb