AZL-35642 CVE-2024-24786 affecting package docker-cli for versions less than 25.0.3-2

🗓️ 05 Mar 2024 23:15:07Reported by GoogleType

osv🔗 osv.dev👁 6 Views

AZL-35642 CVE-2024-24786 affects docker-cli before 25.0.3-2; protojson.Unmarshal can loop on invalid JSON in Any messages or with DiscardUnknown.

Reporter	Title	Published	Views	Family All 1076
RedhatCVE	CVE-2024-24786	6 Mar 202407:12	–	redhatcve
RedHat Linux	Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.12.57 security update	16 May 202416:12	–	redhat
RedHat Linux	Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.13.42 security and extras update	23 May 202406:22	–	redhat
RedHat Linux	Low: Red Hat Security Advisory: Custom Metrics Autoscaler Operator for Red Hat OpenShift 2.12.1-394 Security Update	23 May 202414:09	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: container-tools:rhel8 security update	22 May 202411:48	–	redhat
RedHat Linux	golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON	22 May 202411:48	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Migration Toolkit for Applications security and bug fix update	23 May 202406:39	–	redhat
RedHat Linux	Moderate: Red Hat Security Advisory: Kube Descheduler Operator for Red Hat OpenShift 5.0.1 for RHEL 9	1 Jul 202400:52	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Red Hat OpenShift distributed tracing 3.2.0 operator/operand containers update	5 Jun 202405:15	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Red Hat Product OCP Tools 4.14 OpenShift Jenkins security update	5 Jun 202414:47	–	redhat

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-24786

21 Apr 2026 04:24Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.17.5

EPSS0.01262

SSVC