Lucene search
HistoryMay 08, 2024 - 4:15 p.m.
CVE-2024-24788
dns
infinite loop
lookup functions
cve-2024-24788
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
6
Confidence
Low
EPSS
0
Percentile
10.3%
A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop.
Related
osv
osv
CGA-643p-jwmq-g634
2024-06-06 12:24:23
CGA-f96w-2846-5cxr
2024-06-06 12:25:53
CGA-95vr-3cjf-72gx
2024-06-06 12:25:22
github
github
wolfi
wolfi
CVE-2024-24788 vulnerabilities
2024-12-02 15:13:47
alpinelinux
alpinelinux
CVE-2024-24788
2024-05-08 16:15:08
oraclelinux
oraclelinux
runc security update
2024-11-14 00:00:00
redos
redos
ROS-20240918-05
2024-09-18 00:00:00
cvelist
cvelist
CVE-2024-24788 Malformed DNS message can cause infinite loop in net
2024-05-08 15:31:11
cbl_mariner
cbl_mariner
CVE-2024-24788 affecting package golang for versions less than 1.22.3-1
2024-12-02 15:13:58
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
6
Confidence
Low
EPSS
0
Percentile
10.3%
Related for NVD:CVE-2024-24788