VDB
RHSA-2024%3A2781
RHSA-2024%3A2781
PUBLISHED
CVSS 5.900000095367432 MEDIUM
A flaw was found in Golang's protobuf module, where the unmarshal function can enter an infinite loop when processing certain invalid inputs. This issue occurs during unmarshaling into a message that includes a google.protobuf.Any or when the UnmarshalOptions.DiscardUnknown option is enabled. This flaw allows an attacker to craft malicious input tailored to trigger the identified flaw in the unmarshal function. By providing carefully constructed invalid inputs, they could potentially cause the function to enter an infinite loop, resulting in a denial of service condition or other unintended behaviors in the affected system.
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:a1ecaf86ad837268f6e9de6f8de2657495a3e8bb398a4706b2674a3b63d93237_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | *, openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:a1ecaf86ad837268f6e9de6f8de2657495a3e8bb398a4706b2674a3b63d93237_ppc64le, * |
| Red Hat | openshift4/frr-rhel8@sha256:980bf6736328bbdcc8a3331d1d1b1446546ce2ba0626c54a29a66849015051bb_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/frr-rhel8@sha256:980bf6736328bbdcc8a3331d1d1b1446546ce2ba0626c54a29a66849015051bb_ppc64le, openshift4/frr-rhel8@sha256:980bf6736328bbdcc8a3331d1d1b1446546ce2ba0626c54a29a66849015051bb_ppc64le, openshift4/frr-rhel8@sha256:980bf6736328bbdcc8a3331d1d1b1446546ce2ba0626c54a29a66849015051bb_ppc64le |
| Red Hat | openshift4/ose-helm-operator@sha256:d3824d276fef37264f22df60df36f8438aaddabe67ff7dcf509453075abe62c0_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-helm-operator@sha256:d3824d276fef37264f22df60df36f8438aaddabe67ff7dcf509453075abe62c0_ppc64le, openshift4/ose-helm-operator@sha256:d3824d276fef37264f22df60df36f8438aaddabe67ff7dcf509453075abe62c0_ppc64le, openshift4/ose-helm-operator@sha256:d3824d276fef37264f22df60df36f8438aaddabe67ff7dcf509453075abe62c0_ppc64le |
| Red Hat | openshift4/ose-ptp-operator@sha256:82890d48dc4b3ac257263a349da893204e8483464c8b1abf3573df6aa2ad85b5_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-ptp-operator@sha256:82890d48dc4b3ac257263a349da893204e8483464c8b1abf3573df6aa2ad85b5_ppc64le, openshift4/ose-ptp-operator@sha256:82890d48dc4b3ac257263a349da893204e8483464c8b1abf3573df6aa2ad85b5_ppc64le, * |
| Red Hat | openshift4/ose-egress-dns-proxy@sha256:49a8e3708f4dc66e803732d189466f367b035bc4401064a2ca0abf7cb1b7b08d_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | openshift4/ose-sriov-cni@sha256:d65788dbdbf6b9cbdaf4d5397d5594680dc970aaed3c35d957cdad8d72f1d512_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-sriov-cni@sha256:d65788dbdbf6b9cbdaf4d5397d5594680dc970aaed3c35d957cdad8d72f1d512_arm64, *, * |
| Red Hat | openshift4/ose-cloud-event-proxy@sha256:5ca58b8b07f7e011579ca8f53135d46000f83eae1074d160af08a7632b945833_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, openshift4/ose-cloud-event-proxy@sha256:5ca58b8b07f7e011579ca8f53135d46000f83eae1074d160af08a7632b945833_arm64 |
| Red Hat | openshift4/ose-local-storage-operator@sha256:b0a35fc5cd5e9f7a72290c8811331260062f49986f1c8ff0824eed05a81a145b_s390x as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-local-storage-operator@sha256:b0a35fc5cd5e9f7a72290c8811331260062f49986f1c8ff0824eed05a81a145b_s390x, openshift4/ose-local-storage-operator@sha256:b0a35fc5cd5e9f7a72290c8811331260062f49986f1c8ff0824eed05a81a145b_s390x, openshift4/ose-local-storage-operator@sha256:b0a35fc5cd5e9f7a72290c8811331260062f49986f1c8ff0824eed05a81a145b_s390x |
| Red Hat | openshift4/ose-local-storage-operator@sha256:be735065cc044cdbaf516e7d19cced0a301c49357d66a65888c05e679e6cda75_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-local-storage-operator@sha256:be735065cc044cdbaf516e7d19cced0a301c49357d66a65888c05e679e6cda75_amd64, openshift4/ose-local-storage-operator@sha256:be735065cc044cdbaf516e7d19cced0a301c49357d66a65888c05e679e6cda75_amd64, * |
| Red Hat | openshift-tech-preview/metallb-rhel8@sha256:766aaccd430ca03e3e08f1c9f6468e71c1d6d7ac441d694876f9c4211c7dd5ca_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift-tech-preview/metallb-rhel8@sha256:766aaccd430ca03e3e08f1c9f6468e71c1d6d7ac441d694876f9c4211c7dd5ca_arm64, openshift-tech-preview/metallb-rhel8@sha256:766aaccd430ca03e3e08f1c9f6468e71c1d6d7ac441d694876f9c4211c7dd5ca_arm64, openshift-tech-preview/metallb-rhel8@sha256:766aaccd430ca03e3e08f1c9f6468e71c1d6d7ac441d694876f9c4211c7dd5ca_arm64 |
| Red Hat | openshift4/ose-sriov-network-webhook@sha256:07d63e7bdb557b47e5856bff02a66bb39271e65cf1aa100e2228ecf9c7c98bc3_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | *, openshift4/ose-sriov-network-webhook@sha256:07d63e7bdb557b47e5856bff02a66bb39271e65cf1aa100e2228ecf9c7c98bc3_arm64, openshift4/ose-sriov-network-webhook@sha256:07d63e7bdb557b47e5856bff02a66bb39271e65cf1aa100e2228ecf9c7c98bc3_arm64 |
| Red Hat | openshift4/ose-local-storage-mustgather-rhel8@sha256:b3926a14295234ed636c023a50519a41021364cfad668931b2f1ee022e2a74d5_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-local-storage-mustgather-rhel8@sha256:b3926a14295234ed636c023a50519a41021364cfad668931b2f1ee022e2a74d5_ppc64le, *, openshift4/ose-local-storage-mustgather-rhel8@sha256:b3926a14295234ed636c023a50519a41021364cfad668931b2f1ee022e2a74d5_ppc64le |
| Red Hat | openshift4/frr-rhel8@sha256:980bf6736328bbdcc8a3331d1d1b1446546ce2ba0626c54a29a66849015051bb_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | *, *, openshift4/frr-rhel8@sha256:980bf6736328bbdcc8a3331d1d1b1446546ce2ba0626c54a29a66849015051bb_ppc64le |
| Red Hat | openshift4/ose-cluster-nfd-operator@sha256:e84e5b1469b3c4b1c43ec0c589bd28bf568cc7acdd986f16378c8487f2882449_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-cluster-nfd-operator@sha256:e84e5b1469b3c4b1c43ec0c589bd28bf568cc7acdd986f16378c8487f2882449_ppc64le, *, openshift4/ose-cluster-nfd-operator@sha256:e84e5b1469b3c4b1c43ec0c589bd28bf568cc7acdd986f16378c8487f2882449_ppc64le |
| Red Hat | openshift4/ose-egress-router@sha256:78c1e965b3465d984cd1bee8b6f656880422b1e364a939b95d3434089a756163_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-egress-router@sha256:78c1e965b3465d984cd1bee8b6f656880422b1e364a939b95d3434089a756163_amd64, openshift4/ose-egress-router@sha256:78c1e965b3465d984cd1bee8b6f656880422b1e364a939b95d3434089a756163_amd64, openshift4/ose-egress-router@sha256:78c1e965b3465d984cd1bee8b6f656880422b1e364a939b95d3434089a756163_amd64 |
| Red Hat | openshift4/metallb-rhel8@sha256:1678f27ce3ddc37295cfc9dffb3fb24c24fc34c85240767a2620fcf57ab8078c_ppc64le as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/metallb-rhel8@sha256:1678f27ce3ddc37295cfc9dffb3fb24c24fc34c85240767a2620fcf57ab8078c_ppc64le, openshift4/metallb-rhel8@sha256:1678f27ce3ddc37295cfc9dffb3fb24c24fc34c85240767a2620fcf57ab8078c_ppc64le, openshift4/metallb-rhel8@sha256:1678f27ce3ddc37295cfc9dffb3fb24c24fc34c85240767a2620fcf57ab8078c_ppc64le |
| Red Hat | openshift4/ose-clusterresourceoverride-rhel8-operator@sha256:71dbef587bdd4c696b1cf9c4b2341d59af8c338fdd710a1cb0271ce9d96a6b4f_arm64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, * |
| Red Hat | openshift4/ose-sriov-network-config-daemon@sha256:2464b848375be02db4a5504276c0216ea18deba88c8fa3772154b760c3972f47_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-sriov-network-config-daemon@sha256:2464b848375be02db4a5504276c0216ea18deba88c8fa3772154b760c3972f47_amd64, openshift4/ose-sriov-network-config-daemon@sha256:2464b848375be02db4a5504276c0216ea18deba88c8fa3772154b760c3972f47_amd64, * |
| Red Hat | openshift4/ose-cluster-nfd-operator@sha256:35056f029c27d02b89c4dd60eea654a4ea465fe9c96c0535695ecfc4752493eb_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | openshift4/ose-cluster-nfd-operator@sha256:35056f029c27d02b89c4dd60eea654a4ea465fe9c96c0535695ecfc4752493eb_amd64, openshift4/ose-cluster-nfd-operator@sha256:35056f029c27d02b89c4dd60eea654a4ea465fe9c96c0535695ecfc4752493eb_amd64, openshift4/ose-cluster-nfd-operator@sha256:35056f029c27d02b89c4dd60eea654a4ea465fe9c96c0535695ecfc4752493eb_amd64 |
| Red Hat | openshift4/ose-local-storage-diskmaker@sha256:95cf9e443dca210f56771835852755511ee168b1f51243f5f6095235f20113dd_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, openshift4/ose-local-storage-diskmaker@sha256:95cf9e443dca210f56771835852755511ee168b1f51243f5f6095235f20113dd_amd64 |
…and 310 more
Timeline
- May 16, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 16, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:2781 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2268046 issue
- https://issues.redhat.com/browse/OCPBUGS-32047 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2781.json advisory
- https://access.redhat.com/security/cve/CVE-2024-24786 advisory
- https://www.cve.org/CVERecord?id=CVE-2024-24786 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-24786 advisory
- https://go.dev/cl/569356 advisory
- https://groups.google.com/g/golang-announce/c/ArQ6CDgtEjY/ advisory
- https://pkg.go.dev/vuln/GO-2024-2611 advisory