Infinite loop in JSON unmarshaling in google.golang.org/protobuf

🗓️ 08 Mar 2024 08:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 1 Views

Infinite loop occurs during JSON unmarshaling in google.golang.org/protobuf.

Reporter	Title	Published	Views	Family All 1071
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in Protocol Buffers protobuf-go	26 Feb 202518:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates	4 Dec 202410:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilies in Go affect IBM Robotic Process Automation for Cloud Pak.	2 Dec 202415:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to Protocol Buffers protobuf-go denial of service vulnerability [ CVE-2024-24786]	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	26 Mar 202504:11	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities may affect Go packages that are shipped with IBM CICS TX Standard.	22 Jul 202415:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	25 Sep 202413:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to protobuf-go, libcurl, libexpat, Java SE, IBM GSKit-Crypto, open redirect, buffer overflow condition and golang-fips/openssl vulnerabilities.	30 Apr 202407:19	–	ibm
IBM Security Bulletins	Security Bulletin: Denial of service and security restrictions bypass might affect IBM Storage Defender – Resiliency Service	3 Jul 202420:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Fusion is vulnerable to denial of server, and security bypass due to Golang vulnerabilities.	13 May 202418:39	–	ibm

Vulners

Node

microsoft cbl2_terraform_1.3.2-25Range<1.3.2-20

OR

microsoft cbl2_telegraf_1.29.4-15Range<1.29.4-8

OR

microsoft cbl2_moby-engine_24.0.9-16Range<24.0.9-13

OR

microsoft cbl2_telegraf_1.29.4-15Range<1.29.4-8

OR

microsoft cbl2_moby-containerd-cc_1.7.7-11Range<1.7.7-8

OR

microsoft cbl2_moby-containerd_1.6.26-11Range<1.6.26-8

OR

microsoft cbl2_moby-compose_2.17.3-10Range<2.17.3-5

OR

microsoft cbl2_moby-buildx_0.7.1-24Range<0.7.1-24

OR

microsoft azl3_telegraf_1.29.4-1Range<1.31.0-1

OR

microsoft azl3_packer_1.9.5-9Range<1.9.5-3

OR

microsoft azl3_node-problem-detector_0.8.15-4Range<0.8.15-2

OR

microsoft azl3_kata-containers-cc_3.2.0.azl3-1Range<3.2.0.azl4-1

OR

microsoft azl3_flannel_0.24.2-14Range<0.24.2-8

OR

microsoft azl3_docker-compose_2.24.6-2Range<2.27.0-1

OR

microsoft azl3_docker-buildx_0.12.1-1Range<0.14.0-1

OR

microsoft azl3_cert-manager_1.11.2-8Range<1.12.12-1

OR

microsoft cbl2_sriov-network-device-plugin_3.6.2-9Range<3.6.2-6

OR

microsoft cbl2_skopeo_1.14.2-10Range<1.14.2-9

OR

microsoft cbl2_prometheus-adapter_0.10.0-17Range<0.10.0-12

OR

microsoft cbl2_prometheus_2.37.9-4Range<2.37.9-1

OR

microsoft cbl2_packer_1.9.5-12Range<1.9.5-4

OR

microsoft cbl2_opa_0.50.2-8Range<0.63.0-1

OR

microsoft cbl2_keda_2.4.0-29

OR

microsoft cbl2_kata-containers-cc_3.2.0.azl2-6Range<3.2.0.azl2-1

OR

microsoft cbl2_kata-containers_3.2.0.azl2-6Range<3.2.0.azl2-1

OR

microsoft cbl2_etcd_3.5.12-6Range<3.5.12-6

OR

microsoft cbl2_cf-cli_8.4.0-24Range<8.4.0-22

OR

microsoft cbl2_cert-manager_1.11.2-22Range<1.11.2-14

OR

microsoft cbl2_moby-cli_24.0.9-6Range<24.0.9-6

OR

microsoft cbl2_moby-engine_24.0.9-16Range<24.0.9-13

OR

microsoft cbl2_node-problem-detector_0.8.17-6Range<0.8.17-2

OR

microsoft azl3_ig_0.25.0-2Range<0.29.0-1

OR

microsoft azl3_vitess_17.0.2-1Range<19.0.4-2

OR

microsoft azl3_skopeo_1.14.1-1Range<1.14.4-1

OR

microsoft azl3_prometheus-adapter_0.11.2-1Range<0.12.0-1

OR

microsoft azl3_prometheus_2.45.4-12Range<2.45.4-6

OR

microsoft azl3_opa_0.55.0-1Range<0.63.0-1

OR

microsoft azl3_moby-engine_25.0.3-13Range<25.0.3-7

OR

microsoft azl3_moby-containerd-cc_1.7.7-9Range<1.7.7-5

OR

microsoft azl3_kubevirt_1.2.0-17Range<1.2.0-10

OR

microsoft azl3_kubernetes_1.29.1-4Range<1.30.1-1

OR

microsoft azl3_kube-vip-cloud-provider_0.0.7-1Range<0.0.10-1

OR

microsoft azl3_keda_2.4.0-15Range<2.14.0-1

OR

microsoft azl3_kata-containers_3.2.0.azl3-2Range<3.2.0.azl4-1

OR

microsoft azl3_influxdb_2.7.5-5Range<2.7.3-7

OR

microsoft azl3_gh_2.43.1-2Range<2.62.0-1

OR

microsoft azl3_docker-cli_25.0.7-1Range<25.0.3-2

OR

microsoft azl3_cri-tools_1.29.0-1Range<1.30.1-1

OR

microsoft azl3_coredns_1.11.1-4Range<1.11.1-3

OR

microsoft azl3_containerized-data-importer_1.57.0-14Range<1.57.0-6

OR

microsoft azl3_containerd_1.7.13-8Range<1.7.13-5

OR

microsoft azl3_cf-cli_8.7.3-6Range<8.7.3-3

OR

microsoft azl3_blobfuse2_2.1.0-4Range<2.3.0-1

OR

microsoft azl3_azcopy_10.22.1-1Range<10.24.0-1

OR

microsoft cbl2_vitess_16.0.2-9Range<17.0.7-1

OR

microsoft cbl2_terraform_1.3.2-25Range<1.3.2-20

OR

microsoft cbl2_kubevirt_0.59.0-28Range<0.59.0-17

OR

microsoft cbl2_kubernetes_1.28.4-17Range<1.28.4-12

OR

microsoft cbl2_influxdb_2.6.1-22Range<2.6.1-18

OR

microsoft cbl2_cri-tools_1.29.0-6Range<1.29.0-5

OR

microsoft cbl2_coredns_1.11.1-18Range<1.11.1-12

OR

microsoft cbl2_blobfuse2_2.1.2-8Range<2.1.2-7

OR

microsoft cbl2_azcopy_10.15.0-15Range<10.24.0-1

OR

microsoft azl3_azcopy_10.24.0-1Range<10.24.0-1

OR

microsoft azl3_blobfuse2_2.3.0-1Range<2.3.0-1

OR

microsoft azl3_cert-manager_1.12.12-1Range<1.12.12-1

OR

microsoft azl3_cf-cli_8.7.3-3Range<8.7.3-3

OR

microsoft azl3_containerd_1.7.13-5Range<1.7.13-5

OR

microsoft azl3_containerized-data-importer_1.57.0-6Range<1.57.0-6

OR

microsoft azl3_coredns_1.11.1-3Range<1.11.1-3

OR

microsoft azl3_cri-tools_1.30.1-1Range<1.30.1-1

OR

microsoft azl3_docker-buildx_0.14.0-1Range<0.14.0-1

OR

microsoft azl3_docker-cli_25.0.3-2Range<25.0.3-2

OR

microsoft azl3_docker-compose_2.27.0-1Range<2.27.0-1

OR

microsoft azl3_etcd_3.5.12-2Range<3.5.12-2

OR

microsoft azl3_flannel_0.24.2-8Range<0.24.2-8

OR

microsoft azl3_gh_2.62.0-1Range<2.62.0-1

OR

microsoft azl3_influxdb_2.7.3-7Range<2.7.3-7

OR

microsoft azl3_kata-containers_3.2.0.azl4-1Range<3.2.0.azl4-1

OR

microsoft azl3_kata-containers-cc_3.2.0.azl4-1Range<3.2.0.azl4-1

OR

microsoft azl3_keda_2.14.0-1Range<2.14.0-1

OR

microsoft azl3_kube-vip-cloud-provider_0.0.10-1Range<0.0.10-1

OR

microsoft azl3_kubernetes_1.30.1-1Range<1.30.1-1

OR

microsoft azl3_kubevirt_1.2.0-10Range<1.2.0-10

OR

microsoft azl3_libcontainers-common_20240213-3Range<20240213-3

OR

microsoft azl3_moby-containerd-cc_1.7.7-5Range<1.7.7-5

OR

microsoft azl3_moby-engine_25.0.3-7Range<25.0.3-7

OR

microsoft azl3_node-problem-detector_0.8.15-2Range<0.8.15-2

OR

microsoft azl3_opa_0.63.0-1Range<0.63.0-1

OR

microsoft azl3_packer_1.9.5-3Range<1.9.5-3

OR

microsoft azl3_prometheus_2.45.4-6Range<2.45.4-6

OR

microsoft azl3_prometheus-adapter_0.12.0-1Range<0.12.0-1

OR

microsoft azl3_skopeo_1.14.4-1Range<1.14.4-1

OR

microsoft azl3_telegraf_1.31.0-1Range<1.31.0-1

OR

microsoft azl3_vitess_19.0.4-2Range<19.0.4-2

OR

microsoft azl3_ig_0.29.0-1Range<0.29.0-1

OR

microsoft cbl2_azcopy_10.24.0-1Range<10.24.0-1

OR

microsoft cbl2_blobfuse2_2.1.2-7Range<2.1.2-7

OR

microsoft cbl2_cert-manager_1.11.2-14Range<1.11.2-14

OR

microsoft cbl2_cf-cli_8.4.0-22Range<8.4.0-22

OR

microsoft cbl2_coredns_1.11.1-12Range<1.11.1-12

OR

microsoft cbl2_cri-tools_1.29.0-5Range<1.29.0-5

OR

microsoft cbl2_influxdb_2.6.1-18Range<2.6.1-18

OR

microsoft cbl2_kata-containers_3.2.0.azl2-1Range<3.2.0.azl2-1

OR

microsoft cbl2_kata-containers-cc_3.2.0.azl2-1Range<3.2.0.azl2-1

OR

microsoft cbl2_keda_2.4.0-24Range<2.4.0-24

OR

microsoft cbl2_kubernetes_1.28.4-12Range<1.28.4-12

OR

microsoft cbl2_kubevirt_0.59.0-17Range<0.59.0-17

OR

microsoft cbl2_moby-compose_2.17.3-5Range<2.17.3-5

OR

microsoft cbl2_moby-containerd_1.6.26-8Range<1.6.26-8

OR

microsoft cbl2_moby-containerd-cc_1.7.7-8Range<1.7.7-8

OR

microsoft cbl2_opa_0.63.0-1Range<0.63.0-1

OR

microsoft cbl2_packer_1.9.5-4Range<1.9.5-4

OR

microsoft cbl2_prometheus_2.37.9-1Range<2.37.9-1

OR

microsoft cbl2_prometheus-adapter_0.10.0-12Range<0.10.0-12

OR

microsoft cbl2_skopeo_1.14.2-9Range<1.14.2-9

OR

microsoft cbl2_sriov-network-device-plugin_3.6.2-6Range<3.6.2-6

OR

microsoft cbl2_telegraf_1.29.4-8Range<1.29.4-8

OR

microsoft cbl2_terraform_1.3.2-20Range<1.3.2-20

OR

microsoft cbl2_vitess_17.0.7-1Range<17.0.7-1

OR

microsoft cbl2_node-problem-detector_0.8.17-2Range<0.8.17-2

OR

microsoft cbl2_moby-engine_24.0.9-13Range<24.0.9-13

21 Feb 2026 08:14Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.17.5

EPSS0.00533

SSVC

infinite loop unmarshaling google protobuf protobuf library microsoft