PT-2024-6107 · Go +10 · Go +10

🗓️ 29 Aug 2024 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 17 Views

Go parse function may panic due to deeply nested literals, causing remote denial of service.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data Scheduling was built with a vulnerable golang compiler. ( CVE-2023-29406, CVE-2023-29409 )	6 Dec 202315:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Base OS issues	1 Dec 202316:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in Golang Go (CVE-2022-41724)	27 Jul 202317:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operator and the IntegrationServer and IntegrationRuntime operands are vulnerable to networking errors [CVE-2024-24790]	23 Aug 202409:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to glibc, Golang Go , Apache HTTP, IBM GSKit-Crypto and GnuTLS packages/liberaries .	22 May 202409:19	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been addressed in IBM Verify Identity Access OIDC Provider (CVE-2024-45337, CVE-2025-22869)	9 Jul 202504:16	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple Vulnerabilties affects IBM Watson Machine Learning Accelerator 3.5.0 for Cloud Pak for Data 4.6.5	8 Feb 202419:05	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js, Golang Go, HTTP/2, NGINX, OpenSSH, Linux kernel might affect IBM Spectrum Protect Plus	4 Feb 202518:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson CP4D Data Stores is vulnerable to Golang Go security bypass vulnerabilitiy( CVE-2024-24785)	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana for Self-Hosted Standard Edition is affected by multiple Vulnerabilities	15 Mar 202510:43	–	ibm

Source	Link
github	www.github.com/hex0punk/cont-flood-poc
github	www.github.com/LOURC0D3/CVE-2024-24787-PoC
bdu	www.bdu.fstec.ru/vul/2024-09457
linux	www.linux.oracle.com/errata/ELSA-2024-9454.html
ubuntu	www.ubuntu.com/security/CVE-2023-24531
safe-surf	www.safe-surf.ru/specialists/bulletins-nkcki/695340
linux	www.linux.oracle.com/errata/ELSA-2024-8112.html
bdu	www.bdu.fstec.ru/vul/2024-04485
osv	www.osv.dev/vulnerability/SUSE-SU-2024:3454-1
osv	www.osv.dev/vulnerability/openSUSE-SU-2025:0056-1

07 Feb 2025 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 27.8

CVSS 3.19.8

CVSS 49.2

EPSS0.91969

SSVC