AZL-35634 CVE-2024-24786 affecting package blobfuse2 for versions less than 2.3.0-1

🗓️ 05 Mar 2024 23:15:07Reported by GoogleType

osv

osv🔗 osv.dev👁 7 Views

Blobfuse2 affected; invalid JSON may cause infinite loop with Any or DiscardUnknown.

Reporter	Title	Published	Views	Family All 1074
RedhatCVE	CVE-2024-24786	6 Mar 202407:12	–	redhatcve
RedHat Linux	Low: Red Hat Security Advisory: Custom Metrics Autoscaler Operator for Red Hat OpenShift 2.12.1-394 Security Update	23 May 202414:09	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: container-tools:rhel8 security update	22 May 202411:48	–	redhat
RedHat Linux	golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON	22 May 202411:48	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Migration Toolkit for Applications security and bug fix update	23 May 202406:39	–	redhat
RedHat Linux	Moderate: Red Hat Security Advisory: Kube Descheduler Operator for Red Hat OpenShift 5.0.1 for RHEL 9	1 Jul 202400:52	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Red Hat OpenShift distributed tracing 3.2.0 operator/operand containers update	5 Jun 202405:15	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Red Hat Product OCP Tools 4.14 OpenShift Jenkins security update	5 Jun 202414:47	–	redhat
RedHat Linux	golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON	5 Jun 202414:47	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Red Hat Product OCP Tools 4.12 Openshift Jenkins security update	5 Jun 202414:47	–	redhat

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-24786

21 Apr 2026 04:24Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.17.5

EPSS0.01262

SSVC

blobfuse2 vulnerability invalid json infinite loop google protobuf Any DiscardUnknown option