VDB
RHSA-2024%3A3717
RHSA-2024%3A3717
PUBLISHED
CVSS 5.900000095367432 MEDIUM
A flaw was found in Golang's protobuf module, where the unmarshal function can enter an infinite loop when processing certain invalid inputs. This issue occurs during unmarshaling into a message that includes a google.protobuf.Any or when the UnmarshalOptions.DiscardUnknown option is enabled. This flaw allows an attacker to craft malicious input tailored to trigger the identified flaw in the unmarshal function. By providing carefully constructed invalid inputs, they could potentially cause the function to enter an infinite loop, resulting in a denial of service condition or other unintended behaviors in the affected system.
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-local-storage-rhel9-operator@sha256:9d391107bfe9f9a7337a6b07105484f29ecb2f33e1cb8730a5b900a6dfc05258_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-local-storage-rhel9-operator@sha256:9d391107bfe9f9a7337a6b07105484f29ecb2f33e1cb8730a5b900a6dfc05258_arm64, openshift4/ose-local-storage-rhel9-operator@sha256:9d391107bfe9f9a7337a6b07105484f29ecb2f33e1cb8730a5b900a6dfc05258_arm64, openshift4/ose-local-storage-rhel9-operator@sha256:9d391107bfe9f9a7337a6b07105484f29ecb2f33e1cb8730a5b900a6dfc05258_arm64 |
| Red Hat | openshift4/metallb-rhel9-operator@sha256:73c5ac3fee809b7db562ae65d3034b1cab34c59baf10320f58522a2dfaeb58f9_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | *, openshift4/metallb-rhel9-operator@sha256:73c5ac3fee809b7db562ae65d3034b1cab34c59baf10320f58522a2dfaeb58f9_arm64, openshift4/metallb-rhel9-operator@sha256:73c5ac3fee809b7db562ae65d3034b1cab34c59baf10320f58522a2dfaeb58f9_arm64 |
| Red Hat | openshift4/ose-smb-csi-driver-rhel9-operator@sha256:1e902feff0aa6eb247948abec975ed0ea789e9cfcebbd2eb059618a606896bc8_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-smb-csi-driver-rhel9-operator@sha256:1e902feff0aa6eb247948abec975ed0ea789e9cfcebbd2eb059618a606896bc8_ppc64le, openshift4/ose-smb-csi-driver-rhel9-operator@sha256:1e902feff0aa6eb247948abec975ed0ea789e9cfcebbd2eb059618a606896bc8_ppc64le, * |
| Red Hat | openshift4/ose-sriov-infiniband-cni-rhel9@sha256:d7d010daff9138a16cb8a0a07315d14b79a4518bd94a2b120c3484fc33826933_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | *, *, openshift4/ose-sriov-infiniband-cni-rhel9@sha256:d7d010daff9138a16cb8a0a07315d14b79a4518bd94a2b120c3484fc33826933_ppc64le |
| Red Hat | openshift4/ose-node-feature-discovery-rhel9@sha256:6b065e7cbd8ed6bee4e2da1a4f1ca943662af269f2398388ebcd249bcabfc384_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-node-feature-discovery-rhel9@sha256:6b065e7cbd8ed6bee4e2da1a4f1ca943662af269f2398388ebcd249bcabfc384_ppc64le, openshift4/ose-node-feature-discovery-rhel9@sha256:6b065e7cbd8ed6bee4e2da1a4f1ca943662af269f2398388ebcd249bcabfc384_ppc64le, * |
| Red Hat | openshift4/ose-egress-router-rhel9@sha256:90f5db07a6635351d403e154f0824c77451bed350cc4cd7321318f847b3d08e0_s390x as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-egress-router-rhel9@sha256:90f5db07a6635351d403e154f0824c77451bed350cc4cd7321318f847b3d08e0_s390x, *, openshift4/ose-egress-router-rhel9@sha256:90f5db07a6635351d403e154f0824c77451bed350cc4cd7321318f847b3d08e0_s390x |
| Red Hat | openshift4/ose-egress-http-proxy-rhel9@sha256:d9dd71e30de12c0295015439aee804efd71193568af3df700084dd50b740bc28_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-egress-http-proxy-rhel9@sha256:d9dd71e30de12c0295015439aee804efd71193568af3df700084dd50b740bc28_amd64, openshift4/ose-egress-http-proxy-rhel9@sha256:d9dd71e30de12c0295015439aee804efd71193568af3df700084dd50b740bc28_amd64, openshift4/ose-egress-http-proxy-rhel9@sha256:d9dd71e30de12c0295015439aee804efd71193568af3df700084dd50b740bc28_amd64 |
| Red Hat | openshift4/ose-clusterresourceoverride-rhel9@sha256:a91815ec1c986ab0e74d318ff02420d1ffc95f093da5e3c140b23cb03b482f73_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | *, openshift4/ose-clusterresourceoverride-rhel9@sha256:a91815ec1c986ab0e74d318ff02420d1ffc95f093da5e3c140b23cb03b482f73_arm64, openshift4/ose-clusterresourceoverride-rhel9@sha256:a91815ec1c986ab0e74d318ff02420d1ffc95f093da5e3c140b23cb03b482f73_arm64 |
| Red Hat | openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:cfe748f5c129551d51a0848c0dd2ccb46351b454e2fcab6dfec1703ffdba478d_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:cfe748f5c129551d51a0848c0dd2ccb46351b454e2fcab6dfec1703ffdba478d_arm64, openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:cfe748f5c129551d51a0848c0dd2ccb46351b454e2fcab6dfec1703ffdba478d_arm64, * |
| Red Hat | openshift4/pf-status-relay-rhel9@sha256:e7e02b61f0450bfd7a4effe309d031dd5302342e4dd9c84e4490204ade1040d5_s390x as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/pf-status-relay-rhel9@sha256:e7e02b61f0450bfd7a4effe309d031dd5302342e4dd9c84e4490204ade1040d5_s390x, *, openshift4/pf-status-relay-rhel9@sha256:e7e02b61f0450bfd7a4effe309d031dd5302342e4dd9c84e4490204ade1040d5_s390x |
| Red Hat | openshift4/kube-compare-artifacts-rhel9@sha256:9a1ace9b9d12303e39939aa813f4e7f0c05734d209596161ab6a89c4dc89ab9a_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/kube-compare-artifacts-rhel9@sha256:9a1ace9b9d12303e39939aa813f4e7f0c05734d209596161ab6a89c4dc89ab9a_arm64, openshift4/kube-compare-artifacts-rhel9@sha256:9a1ace9b9d12303e39939aa813f4e7f0c05734d209596161ab6a89c4dc89ab9a_arm64, openshift4/kube-compare-artifacts-rhel9@sha256:9a1ace9b9d12303e39939aa813f4e7f0c05734d209596161ab6a89c4dc89ab9a_arm64 |
| Red Hat | openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:5cbdd3b84395a0161c42d8d4f0c08b66d9f62bc091d6a35ed4267a18a8cefe33_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | *, openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:5cbdd3b84395a0161c42d8d4f0c08b66d9f62bc091d6a35ed4267a18a8cefe33_amd64, openshift4/ose-vertical-pod-autoscaler-rhel9-operator@sha256:5cbdd3b84395a0161c42d8d4f0c08b66d9f62bc091d6a35ed4267a18a8cefe33_amd64 |
| Red Hat | openshift4/ose-dpu-rhel9-operator@sha256:f6488fcfebc82a5e0372b8cb4b7f9c1c255d9377bede300dd63d9459c0ca13aa_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-dpu-rhel9-operator@sha256:f6488fcfebc82a5e0372b8cb4b7f9c1c255d9377bede300dd63d9459c0ca13aa_amd64, *, openshift4/ose-dpu-rhel9-operator@sha256:f6488fcfebc82a5e0372b8cb4b7f9c1c255d9377bede300dd63d9459c0ca13aa_amd64 |
| Red Hat | openshift4/ose-sriov-network-rhel9-operator@sha256:838f9da4aac73bdcc7181e939985f95a80d796e7372134f9d5abb94647dbe516_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-sriov-network-rhel9-operator@sha256:838f9da4aac73bdcc7181e939985f95a80d796e7372134f9d5abb94647dbe516_ppc64le, openshift4/ose-sriov-network-rhel9-operator@sha256:838f9da4aac73bdcc7181e939985f95a80d796e7372134f9d5abb94647dbe516_ppc64le, openshift4/ose-sriov-network-rhel9-operator@sha256:838f9da4aac73bdcc7181e939985f95a80d796e7372134f9d5abb94647dbe516_ppc64le |
| Red Hat | openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:fba0052ad8ad0fb60db63f00ad218266f96697d400c7b74e8dc17577a81e8efc_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:fba0052ad8ad0fb60db63f00ad218266f96697d400c7b74e8dc17577a81e8efc_ppc64le, openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:fba0052ad8ad0fb60db63f00ad218266f96697d400c7b74e8dc17577a81e8efc_ppc64le, openshift4/ose-clusterresourceoverride-rhel9-operator@sha256:fba0052ad8ad0fb60db63f00ad218266f96697d400c7b74e8dc17577a81e8efc_ppc64le |
| Red Hat | openshift4/ose-sriov-rdma-cni-rhel9@sha256:a27d8a3bd11a0714afcb3a1ed5f046136ba670782e90e5669da8822398f2563d_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | *, *, openshift4/ose-sriov-rdma-cni-rhel9@sha256:a27d8a3bd11a0714afcb3a1ed5f046136ba670782e90e5669da8822398f2563d_arm64 |
| Red Hat | openshift4/nmstate-console-plugin-rhel9@sha256:4c82987cf92a9322b438a91c62c2f4656b82622f6e8844e6fa73b1f9514e012e_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/nmstate-console-plugin-rhel9@sha256:4c82987cf92a9322b438a91c62c2f4656b82622f6e8844e6fa73b1f9514e012e_amd64, openshift4/nmstate-console-plugin-rhel9@sha256:4c82987cf92a9322b438a91c62c2f4656b82622f6e8844e6fa73b1f9514e012e_amd64, openshift4/nmstate-console-plugin-rhel9@sha256:4c82987cf92a9322b438a91c62c2f4656b82622f6e8844e6fa73b1f9514e012e_amd64 |
| Red Hat | openshift4/ose-egress-dns-proxy-rhel9@sha256:0ee144362b1296213623804a123870e5956fa913214ec71531d327de90c11592_s390x as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-egress-dns-proxy-rhel9@sha256:0ee144362b1296213623804a123870e5956fa913214ec71531d327de90c11592_s390x, *, openshift4/ose-egress-dns-proxy-rhel9@sha256:0ee144362b1296213623804a123870e5956fa913214ec71531d327de90c11592_s390x |
| Red Hat | openshift4/ose-operator-sdk-rhel9@sha256:47822ed1fff4f90c60467240e18114fcb9abb7a7b48cbac6a614b973a7e88ffb_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-operator-sdk-rhel9@sha256:47822ed1fff4f90c60467240e18114fcb9abb7a7b48cbac6a614b973a7e88ffb_ppc64le, openshift4/ose-operator-sdk-rhel9@sha256:47822ed1fff4f90c60467240e18114fcb9abb7a7b48cbac6a614b973a7e88ffb_ppc64le, openshift4/ose-operator-sdk-rhel9@sha256:47822ed1fff4f90c60467240e18114fcb9abb7a7b48cbac6a614b973a7e88ffb_ppc64le |
| Red Hat | openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:d102953cea47b0acf0c06a5e080e050acbe53e0f54af8368b3c360b359377f3d_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:d102953cea47b0acf0c06a5e080e050acbe53e0f54af8368b3c360b359377f3d_amd64, openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:d102953cea47b0acf0c06a5e080e050acbe53e0f54af8368b3c360b359377f3d_amd64, openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:d102953cea47b0acf0c06a5e080e050acbe53e0f54af8368b3c360b359377f3d_amd64 |
…and 362 more
Timeline
- Oct 1, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 16, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:3717 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2268046 issue
- https://issues.redhat.com/browse/OCPBUGS-30549 advisory
- https://issues.redhat.com/browse/OCPBUGS-33137 advisory
- https://issues.redhat.com/browse/OCPBUGS-33594 advisory
- https://issues.redhat.com/browse/OCPBUGS-33741 advisory
- https://issues.redhat.com/browse/OCPBUGS-33799 advisory
- https://issues.redhat.com/browse/OCPBUGS-34045 advisory
- https://issues.redhat.com/browse/OCPBUGS-34131 advisory
- https://issues.redhat.com/browse/OCPBUGS-34159 advisory
- https://issues.redhat.com/browse/OCPBUGS-34190 advisory
- https://issues.redhat.com/browse/OCPBUGS-34282 advisory
- https://issues.redhat.com/browse/OCPBUGS-34340 advisory
- https://issues.redhat.com/browse/OCPBUGS-34344 advisory
- https://issues.redhat.com/browse/OCPBUGS-35351 advisory
- https://issues.redhat.com/browse/OCPBUGS-36243 advisory
- https://issues.redhat.com/browse/OCPBUGS-36268 advisory
- https://issues.redhat.com/browse/OCPBUGS-36683 advisory
- https://issues.redhat.com/browse/OCPBUGS-37567 advisory
…and 13 more