Lucene search
+L

19 matches found

RedHat Linux
RedHat Linux
•added 2024/04/30 1:36 p.m.•29 views

google.golang.org/protobuf: golang-protobuf: Denial of Service via infinite loop when unmarshaling invalid JSON

A flaw was found in golang-protobuf. The protojson unmarshaling function can enter an infinite loop when parsing certain invalid JSON inputs, specifically when decoding messages containing Any values or when configured to discard unknown fields. A remote attacker can exploit this vulnerability by...

7.5CVSS6.4AI score0.01262EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2024/04/18 2:08 a.m.•33 views

google.golang.org/protobuf: golang-protobuf: Denial of Service via infinite loop when unmarshaling invalid JSON

A flaw was found in golang-protobuf. The protojson unmarshaling function can enter an infinite loop when parsing certain invalid JSON inputs, specifically when decoding messages containing Any values or when configured to discard unknown fields. A remote attacker can exploit this vulnerability by...

7.5CVSS6.4AI score0.01262EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2024/03/27 12:45 a.m.•20 views

google.golang.org/protobuf: golang-protobuf: Denial of Service via infinite loop when unmarshaling invalid JSON

A flaw was found in golang-protobuf. The protojson unmarshaling function can enter an infinite loop when parsing certain invalid JSON inputs, specifically when decoding messages containing Any values or when configured to discard unknown fields. A remote attacker can exploit this vulnerability by...

7.5CVSS6.4AI score0.01262EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
•added 2024/03/06 12:31 a.m.•73 views

Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSON

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

7.5CVSS6.7AI score0.01262EPSS
SaveExploits0References9Affected Software3
osv_azl
osv_azl
•added 2024/03/05 11:15 p.m.•18 views

AZL-35551 CVE-2024-24786 affecting package azcopy for versions less than 10.24.0-1

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

7.5CVSS6.7AI score0.01262EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2024/03/05 11:15 p.m.•27 views

AZL-35558 CVE-2024-24786 affecting package cf-cli for versions less than 8.4.0-22

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

7.5CVSS6.6AI score0.01262EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2024/03/05 11:15 p.m.•24 views

AZL-35634 CVE-2024-24786 affecting package blobfuse2 for versions less than 2.3.0-1

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

7.5CVSS6.7AI score0.01262EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2024/03/05 11:15 p.m.•15 views

AZL-35639 CVE-2024-24786 affecting package coredns for versions less than 1.11.1-3

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

7.5CVSS6.7AI score0.01262EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2024/03/05 11:15 p.m.•25 views

AZL-35633 CVE-2024-24786 affecting package azcopy for versions less than 10.24.0-1

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

7.5CVSS6.7AI score0.01262EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2024/03/05 11:15 p.m.•20 views

AZL-35660 CVE-2024-24786 affecting package keda for versions less than 2.14.0-1

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

7.5CVSS6.7AI score0.01262EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2024/03/05 11:15 p.m.•19 views

AZL-35651 CVE-2024-24786 affecting package gh for versions less than 2.62.0-1

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

7.5CVSS6.7AI score0.01262EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2024/03/05 11:15 p.m.•21 views

AZL-35661 CVE-2024-24786 affecting package kube-vip-cloud-provider for versions less than 0.0.10-1

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

7.5CVSS6.7AI score0.01262EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2024/03/05 11:15 p.m.•26 views

AZL-35582 CVE-2024-24786 affecting package moby-buildx for versions less than 0.7.1-24

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

7.5CVSS6.7AI score0.01262EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2024/03/05 11:15 p.m.•25 views

AZL-35554 CVE-2024-24786 affecting package blobfuse2 for versions less than 2.1.2-7

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

7.5CVSS6.6AI score0.01262EPSS
SaveExploits0References1
NVD
NVD
•added 2024/03/05 11:15 p.m.•45 views

CVE-2024-24786

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

7.5CVSS5.9AI score0.01262EPSS
SaveExploits0References5
osv_azl
osv_azl
•added 2024/03/05 11:15 p.m.•20 views

AZL-35643 CVE-2024-24786 affecting package docker-compose for versions less than 2.27.0-1

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

7.5CVSS6.7AI score0.01262EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2024/03/05 11:15 p.m.•20 views

UBUNTU-CVE-2024-24786

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

7.5CVSS6.7AI score0.01262EPSS
SaveExploits0References7
AlpineLinux
AlpineLinux
•added 2024/03/05 10:22 p.m.•64 views

CVE-2024-24786

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

7.5CVSS6.8AI score0.01262EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/05 12:00 a.m.•6 views

CVE-2024-24786: Undefined Security Weakness

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

7.5CVSS5.8AI score0.01262EPSS
SaveExploits0References1
Rows per page
Query Builder