SUSE-SU-2024:3196-1 Security update for go1.22

This update for go1.22 fixes the following issues: - Update to go v1.22.7 - CVE-2024-34155: Fixed stack exhaustion in all Parse functions. bsc1230252 - CVE-2024-34156: Fixed stack exhaustion in Decoder.Decode. bsc1230253 - CVE-2024-34158: Fixed stack exhaustion in Parse. bsc1230254...

BELL-CVE-2024-34155

Bulletin has no description...

CVE-2024-34155

A flaw was found in the go/parser package of the Golang standard library. Calling any Parse functions on Go source code containing deeply nested literals can cause a panic due to stack exhaustion. Mitigation Mitigation for this issue is either not available or the currently available options do n...

CVE-2024-34155

creationtimestamp| type| source ---|---|--- 2024-09-07 00:07:53+00:00| seen| https://t.me/cvedetector/5007 2026-07-26 02:02:05+00:00| seen| https://t.me/EchelonEyes/3130 2026-07-27 00:00:43+00:00| seen| https://t.me/EchelonEyes/3130 2026-07-28 00:00:45+00:00| seen| https://t.me/EchelonEyes/3130...

CVE-2024-34155

Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion...

CVE-2024-34155 vulnerabilities

Vulnerabilities for packages: flux-source-controller, distribution-fips, grpc-health-probe, mailpit, victoriametrics-operator-fips, src-fingerprint-fips, direnv, nri-mongodb, sonobuoy, tekton-chains, govulncheck, azcopy, secrets-store-csi-driver-provider-gcp, velero-fips, actions-runner-controlle...

CVE-2024-34155 vulnerabilities

Vulnerabilities for packages: stakater-reloader, guac, nvidia-container-toolkit, crossplane-provider-azure-managedidentity, dgraph, rancher-fleet, nri-memcached, dockerize, helm-docs, eksctl, kustomize, nuclei, crossplane-provider-azure-authorization, gomplate, opentelemetry-collector-contrib,...

CVE-2024-34155

Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion...

AZL-48896 CVE-2024-34155 affecting package golang for versions less than 1.18.8-8

Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion...

CVE-2024-34155 Stack exhaustion in all Parse functions in go/parser

Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion...

CVE-2024-34155

CVE-2024-34155 concerns the Go tooling stack: parsing Go source with deeply nested literals can panic due to stack exhaustion. The connected advisories confirm this affects core Go components such as the parser, encoding/gob (Decode), and go/build/constraint (Parse) when handling deeply nested in...

CVE-2024-34155 Stack exhaustion in all Parse functions in go/parser

Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion...

CVE-2024-34155

Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion...

CVE-2022-34155

creationtimestamp| type| source ---|---|--- 2023-07-18 18:32:46+00:00| seen| https://t.me/cibsecurity/66911...

CVE-2022-34155

Improper Authentication vulnerability in miniOrange OAuth Single Sign On – SSO OAuth Client plugin allows Authentication Bypass.This issue affects OAuth Single Sign On – SSO OAuth Client: from n/a through 6.23.3...

CVE-2022-34155 WordPress OAuth Single Sign On – SSO (OAuth Client) Plugin <= 6.23.3 is vulnerable to Broken Authentication

Improper Authentication vulnerability in miniOrange OAuth Single Sign On – SSO OAuth Client plugin allows Authentication Bypass.This issue affects OAuth Single Sign On – SSO OAuth Client: from n/a through 6.23.3...

CVE-2022-34155

CVE-2022-34155 applies to the WordPress plugin “miniOrange OAuth Single Sign On – SSO (OAuth Client)” and is caused by an Improper Authentication flaw that enables an Authentication Bypass. Affected versions are up to 6.23.3; exploitation could allow unauthorized access to protected resources. Th...

CVE-2023-34155

Vulnerability of unauthorized calling on HUAWEI phones and tablets.Successful exploitation of this vulnerability may affect availability...

CVE-2023-34155

CVE-2023-34155 pertains to Huawei devices (phones/tablets) and is described as a vulnerability in unauthorized calling that can affect availability. The connected sources indicate the issue arises from an incorrect clearance or release of resources in the HarmonyOS/EMUI shell used on Huawei devic...

WordPress OAuth Single Sign On – SSO (OAuth Client) Plugin <= 6.23.3 is vulnerable to Broken Authentication

Software OAuth Single Sign On – SSO OAuth Client Type Plugin Vulnerable versions = 6.23.3 Fixed in 6.23.4 OWASP Top 10 A2: Broken Authentication Classification Broken Authentication CVE CVE-2022-34155 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 74c6748a10df Credits...