VDB
RHSA-2024%3A5422
RHSA-2024%3A5422
PUBLISHED
CVSS 5.900000095367432 MEDIUM
A flaw was found in Golang's protobuf module, where the unmarshal function can enter an infinite loop when processing certain invalid inputs. This issue occurs during unmarshaling into a message that includes a google.protobuf.Any or when the UnmarshalOptions.DiscardUnknown option is enabled. This flaw allows an attacker to craft malicious input tailored to trigger the identified flaw in the unmarshal function. By providing carefully constructed invalid inputs, they could potentially cause the function to enter an infinite loop, resulting in a denial of service condition or other unintended behaviors in the affected system.
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-installer-artifacts-rhel9@sha256:02f6aaa7e9d114b044ddf9298da785296d747643a34e854a3177a8e27d26020c_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | *, openshift4/ose-installer-artifacts-rhel9@sha256:02f6aaa7e9d114b044ddf9298da785296d747643a34e854a3177a8e27d26020c_arm64, * |
| Red Hat | openshift4/ose-hyperkube-rhel9@sha256:f8f14361fdf662e6960f53add1a22f214fdae45d52c6e4dd812a1fb7e3b75e6d_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | *, openshift4/ose-hyperkube-rhel9@sha256:f8f14361fdf662e6960f53add1a22f214fdae45d52c6e4dd812a1fb7e3b75e6d_arm64, openshift4/ose-hyperkube-rhel9@sha256:f8f14361fdf662e6960f53add1a22f214fdae45d52c6e4dd812a1fb7e3b75e6d_arm64 |
| Red Hat | openshift4/ose-gcp-cluster-api-controllers-rhel9@sha256:ff1722164aeb553c1f5dc9acffd0e4fb932d18be95618db040cc75713df426fb_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-gcp-cluster-api-controllers-rhel9@sha256:ff1722164aeb553c1f5dc9acffd0e4fb932d18be95618db040cc75713df426fb_ppc64le, *, openshift4/ose-gcp-cluster-api-controllers-rhel9@sha256:ff1722164aeb553c1f5dc9acffd0e4fb932d18be95618db040cc75713df426fb_ppc64le |
| Red Hat | openshift4/ose-csi-driver-shared-resource-rhel9-operator@sha256:b14927e9da06dbe65cffe31b5a35dd6c8d06ee200ef2ba3335ba78b0a50e20d3_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-csi-driver-shared-resource-rhel9-operator@sha256:b14927e9da06dbe65cffe31b5a35dd6c8d06ee200ef2ba3335ba78b0a50e20d3_arm64, openshift4/ose-csi-driver-shared-resource-rhel9-operator@sha256:b14927e9da06dbe65cffe31b5a35dd6c8d06ee200ef2ba3335ba78b0a50e20d3_arm64, openshift4/ose-csi-driver-shared-resource-rhel9-operator@sha256:b14927e9da06dbe65cffe31b5a35dd6c8d06ee200ef2ba3335ba78b0a50e20d3_arm64 |
| Red Hat | openshift4/ose-operator-marketplace-rhel9@sha256:26b94c2a33ffd3b10219f64380e7f3795d99a7f8c40420e656806b4b97160f63_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-operator-marketplace-rhel9@sha256:26b94c2a33ffd3b10219f64380e7f3795d99a7f8c40420e656806b4b97160f63_amd64, *, openshift4/ose-operator-marketplace-rhel9@sha256:26b94c2a33ffd3b10219f64380e7f3795d99a7f8c40420e656806b4b97160f63_amd64 |
| Red Hat | openshift4/ose-prom-label-proxy-rhel9@sha256:090661d3aac1b3f07693b5c9e82109a2aec724b2d0e18c0d362f0d7725470c27_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | *, openshift4/ose-prom-label-proxy-rhel9@sha256:090661d3aac1b3f07693b5c9e82109a2aec724b2d0e18c0d362f0d7725470c27_amd64, openshift4/ose-prom-label-proxy-rhel9@sha256:090661d3aac1b3f07693b5c9e82109a2aec724b2d0e18c0d362f0d7725470c27_amd64 |
| Red Hat | openshift4/ose-installer-altinfra-rhel9@sha256:113abab98c9ae5a4ffff0a2125cf5f9ab9a389b552064e653d110e4cc9666188_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | *, *, openshift4/ose-installer-altinfra-rhel9@sha256:113abab98c9ae5a4ffff0a2125cf5f9ab9a389b552064e653d110e4cc9666188_ppc64le |
| Red Hat | openshift4/ose-csi-node-driver-registrar-rhel9@sha256:213fca5c5a201910233eac04a4ddee9687a0bff28e7a192c61f7087e6cf02a33_s390x as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-csi-node-driver-registrar-rhel9@sha256:213fca5c5a201910233eac04a4ddee9687a0bff28e7a192c61f7087e6cf02a33_s390x, *, openshift4/ose-csi-node-driver-registrar-rhel9@sha256:213fca5c5a201910233eac04a4ddee9687a0bff28e7a192c61f7087e6cf02a33_s390x |
| Red Hat | openshift4/ose-cluster-authentication-rhel9-operator@sha256:e6dd655308c560169de1c704433e99563091cfda2e24a096ceacecbed8d0d7b5_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-cluster-authentication-rhel9-operator@sha256:e6dd655308c560169de1c704433e99563091cfda2e24a096ceacecbed8d0d7b5_ppc64le, openshift4/ose-cluster-authentication-rhel9-operator@sha256:e6dd655308c560169de1c704433e99563091cfda2e24a096ceacecbed8d0d7b5_ppc64le, openshift4/ose-cluster-authentication-rhel9-operator@sha256:e6dd655308c560169de1c704433e99563091cfda2e24a096ceacecbed8d0d7b5_ppc64le |
| Red Hat | openshift4/ose-multus-cni-microshift-rhel9@sha256:68c805e016aba048f303e3c5ce930bebd7e7ac21fe66a5ea913fa67e8dd4168e_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-multus-cni-microshift-rhel9@sha256:68c805e016aba048f303e3c5ce930bebd7e7ac21fe66a5ea913fa67e8dd4168e_amd64, openshift4/ose-multus-cni-microshift-rhel9@sha256:68c805e016aba048f303e3c5ce930bebd7e7ac21fe66a5ea913fa67e8dd4168e_amd64, openshift4/ose-multus-cni-microshift-rhel9@sha256:68c805e016aba048f303e3c5ce930bebd7e7ac21fe66a5ea913fa67e8dd4168e_amd64 |
| Red Hat | openshift4/ose-aws-pod-identity-webhook-rhel9@sha256:8722e187cc5f866448ccd693d927af9bd4e41aa993cb345b21fe59d1842ebec1_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-aws-pod-identity-webhook-rhel9@sha256:8722e187cc5f866448ccd693d927af9bd4e41aa993cb345b21fe59d1842ebec1_arm64, *, * |
| Red Hat | openshift4/ose-docker-builder-rhel9@sha256:a0e341c60c177f1093f8d5c10a8d5a746971436d9417936a8faa3f0e505c50cb_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | *, openshift4/ose-docker-builder-rhel9@sha256:a0e341c60c177f1093f8d5c10a8d5a746971436d9417936a8faa3f0e505c50cb_ppc64le, openshift4/ose-docker-builder-rhel9@sha256:a0e341c60c177f1093f8d5c10a8d5a746971436d9417936a8faa3f0e505c50cb_ppc64le |
| Red Hat | openshift4/ose-cluster-kube-cluster-api-rhel9-operator@sha256:fc7b7e52eaab91e49fceef6b7ed8f343c821b8410fe7b3c6b51ca6bfb2b38e6c_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | *, openshift4/ose-cluster-kube-cluster-api-rhel9-operator@sha256:fc7b7e52eaab91e49fceef6b7ed8f343c821b8410fe7b3c6b51ca6bfb2b38e6c_amd64, openshift4/ose-cluster-kube-cluster-api-rhel9-operator@sha256:fc7b7e52eaab91e49fceef6b7ed8f343c821b8410fe7b3c6b51ca6bfb2b38e6c_amd64 |
| Red Hat | openshift4/ose-csi-external-provisioner-rhel9@sha256:ca28cb2f6a1f8c9c9b8ffb9d332b9e5c43d75cec3826da180ad22292a27de909_s390x as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-csi-external-provisioner-rhel9@sha256:ca28cb2f6a1f8c9c9b8ffb9d332b9e5c43d75cec3826da180ad22292a27de909_s390x, openshift4/ose-csi-external-provisioner-rhel9@sha256:ca28cb2f6a1f8c9c9b8ffb9d332b9e5c43d75cec3826da180ad22292a27de909_s390x, openshift4/ose-csi-external-provisioner-rhel9@sha256:ca28cb2f6a1f8c9c9b8ffb9d332b9e5c43d75cec3826da180ad22292a27de909_s390x |
| Red Hat | openshift4/egress-router-cni-rhel9@sha256:b870cae1ae542170258a66d6df719ff59feda4dc0d6d7ba6bbde558e0fdff7a2_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | *, openshift4/egress-router-cni-rhel9@sha256:b870cae1ae542170258a66d6df719ff59feda4dc0d6d7ba6bbde558e0fdff7a2_ppc64le, openshift4/egress-router-cni-rhel9@sha256:b870cae1ae542170258a66d6df719ff59feda4dc0d6d7ba6bbde558e0fdff7a2_ppc64le |
| Red Hat | openshift4/ose-oauth-proxy-rhel9@sha256:a68779e6daf662e8a05060e7fa1b3e92d481edbbdd8675e32009c00fdddd3daf_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | *, *, openshift4/ose-oauth-proxy-rhel9@sha256:a68779e6daf662e8a05060e7fa1b3e92d481edbbdd8675e32009c00fdddd3daf_ppc64le |
| Red Hat | openshift4/driver-toolkit-rhel9@sha256:29a4c001ab771a941f63832f9f7613809ddaa3cb8704a9d3f86d47d14b6fb5f6_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/driver-toolkit-rhel9@sha256:29a4c001ab771a941f63832f9f7613809ddaa3cb8704a9d3f86d47d14b6fb5f6_arm64, *, openshift4/driver-toolkit-rhel9@sha256:29a4c001ab771a941f63832f9f7613809ddaa3cb8704a9d3f86d47d14b6fb5f6_arm64 |
| Red Hat | openshift4/ose-cloud-credential-rhel9-operator@sha256:64eeb27fbb7bc251e5993aeececd93929da2e999515ab652c34f28b925880a0a_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | *, openshift4/ose-cloud-credential-rhel9-operator@sha256:64eeb27fbb7bc251e5993aeececd93929da2e999515ab652c34f28b925880a0a_arm64, * |
| Red Hat | openshift4/ose-machine-api-provider-openstack-rhel9@sha256:c4385797f1c7b730585b201bd18a6e3bde0e1ac70654b391b1bb708b3d5b2661_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-machine-api-provider-openstack-rhel9@sha256:c4385797f1c7b730585b201bd18a6e3bde0e1ac70654b391b1bb708b3d5b2661_arm64, *, openshift4/ose-machine-api-provider-openstack-rhel9@sha256:c4385797f1c7b730585b201bd18a6e3bde0e1ac70654b391b1bb708b3d5b2661_arm64 |
| Red Hat | openshift4/ose-gcp-cloud-controller-manager-rhel9@sha256:a130af578a6077f2606a77bc6f4a9a22b9a4e9570cc0813d0ddd6efcfdde2d40_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | *, *, * |
…and 1308 more
Timeline
- Aug 20, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 16, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:5422 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2268046 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2292331 issue
- https://issues.redhat.com/browse/OCPBUGS-34384 advisory
- https://issues.redhat.com/browse/OCPBUGS-34690 advisory
- https://issues.redhat.com/browse/OCPBUGS-34801 advisory
- https://issues.redhat.com/browse/OCPBUGS-35407 advisory
- https://issues.redhat.com/browse/OCPBUGS-36171 advisory
- https://issues.redhat.com/browse/OCPBUGS-36484 advisory
- https://issues.redhat.com/browse/OCPBUGS-36918 advisory
- https://issues.redhat.com/browse/OCPBUGS-37060 advisory
- https://issues.redhat.com/browse/OCPBUGS-37857 advisory
- https://issues.redhat.com/browse/OCPBUGS-37967 advisory
- https://issues.redhat.com/browse/OCPBUGS-38015 advisory
- https://issues.redhat.com/browse/OCPBUGS-38035 advisory
- https://issues.redhat.com/browse/OCPBUGS-38093 advisory
- https://issues.redhat.com/browse/OCPBUGS-38129 advisory
- https://issues.redhat.com/browse/OCPBUGS-38167 advisory
- https://issues.redhat.com/browse/OCPBUGS-38290 advisory
…and 13 more