Lucene search
GitHub Advisory DatabaseGHSA-8R3F-844C-MC37HistoryMar 06, 2024 - 12:31 a.m.
Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSON
2024-03-0600:31:27
CWE-835
GitHub Advisory Database
github.com
15
golang
protojson
unmarshal
infinite loop
invalid json
unmarshaloptions
discardunknown
software
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.
References
www.openwall.com/lists/oss-security/2024/03/08/4
github.com/advisories/GHSA-8r3f-844c-mc37
github.com/protocolbuffers/protobuf-go/commit/f01a588e5810b90996452eec4a28f22a0afae023
github.com/protocolbuffers/protobuf-go/releases/tag/v1.33.0
go.dev/cl/569356
lists.fedoraproject.org/archives/list/[email protected]/message/JDMBHAVSDU2FBDZ45U3A2VLSM35OJ2HU
nvd.nist.gov/vuln/detail/CVE-2024-24786
pkg.go.dev/vuln/GO-2024-2611
Related
nessus
nessus
RHEL 7 : rhc-worker-script (RHSA-2024:1874)
2024-04-18 00:00:00
RHEL 9 : buildah update (Moderate) (RHSA-2024:2550)
2024-04-30 00:00:00
Fedora 38 : kubernetes (2024-5bae6c0ea7)
2024-03-23 00:00:00
cbl_mariner
cbl_mariner
CVE-2024-24786 affecting package keda for versions less than 2.14.0-1
2024-05-17 21:38:35
CVE-2024-24786 affecting package opa for versions less than 0.63.0-1
2024-04-10 21:48:40
redhatcve
redhatcve
CVE-2024-24786
2024-03-06 07:12:54
osv
osv
Moderate: buildah bug fix update
2024-05-10 14:32:42
google-guest-agent, google-osconfig-agent vulnerability
2024-04-23 11:38:08
Infinite loop in JSON unmarshaling in google.golang.org/protobuf
2024-03-05 20:24:05
almalinux
almalinux
Moderate: buildah bug fix update
2024-04-30 00:00:00
Moderate: skopeo security and bug fix update
2024-04-30 00:00:00
Moderate: podman security and bug fix update
2024-04-30 00:00:00
cve
cve
CVE-2024-24786
2024-03-05 23:15:07
cvelist
cvelist
redhat
redhat
(RHSA-2024:1874) Moderate: rhc-worker-script security and enhancement update
2024-04-18 00:58:18
(RHSA-2024:1665) Moderate: Red Hat Advanced Cluster Management 2.8.6 security and bug fix updates
2024-04-03 18:07:49
(RHSA-2024:1795) Moderate: VolSync 0.9.1 security fixes and enhancements
2024-04-11 21:03:07
openvas
openvas
Ubuntu: Security Advisory (USN-6746-1)
2024-04-24 00:00:00
Fedora: Security Advisory for kubernetes (FEDORA-2024-5bae6c0ea7)
2024-03-25 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: kubernetes-1.26.15-1.fc38
2024-03-24 01:36:01
ubuntu
ubuntu
Google Guest Agent and Google OS Config Agent vulnerability
2024-04-23 00:00:00
alpinelinux
alpinelinux
CVE-2024-24786
2024-03-05 23:15:07
veracode
veracode
Infinite Loop
2024-04-02 06:02:07
rocky
rocky
buildah bug fix update
2024-05-10 14:32:42
skopeo security and bug fix update
2024-05-10 14:32:42
podman security and bug fix update
2024-05-10 14:32:42
prion
prion
Design/Logic Flaw
2024-03-05 23:15:00
ubuntucve
ubuntucve
CVE-2024-24786
2024-03-05 00:00:00
oraclelinux
oraclelinux
buildah bug fix update
2024-05-07 00:00:00
skopeo security and bug fix update
2024-05-07 00:00:00
cri-o security update
2024-04-26 00:00:00
cgr
cgr
CVE-2024-24786 vulnerabilities
2024-05-19 03:07:16
wolfi
wolfi
CVE-2024-24786 vulnerabilities
2024-05-20 15:55:23
debiancve
debiancve
CVE-2024-24786
2024-03-05 23:15:07
