VDB
RHSA-2024%3A8329
RHSA-2024%3A8329
PUBLISHED
CVSS 5.900000095367432 MEDIUM
A flaw was found in the go/parser package of the Golang standard library. Calling any Parse functions on Go source code containing deeply nested literals can cause a panic due to stack exhaustion.
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | cryostat-tech-preview/jfr-datasource-rhel8@sha256:ffa084d43873b7a87d3c6685399f196f019a34503e0bda071e2a4278197c1865_amd64 as a component of Cryostat 3 on RHEL 8 | * |
| Red Hat | cryostat-tech-preview/cryostat-rhel8@sha256:7ae4c5c565a87d90a7cc5f1e5015de2e69ff392c85efb3bd7d0c230b4dea1b32_amd64 as a component of Cryostat 3 on RHEL 8 | cryostat-tech-preview/cryostat-rhel8@sha256:7ae4c5c565a87d90a7cc5f1e5015de2e69ff392c85efb3bd7d0c230b4dea1b32_amd64 |
| Red Hat | cryostat-tech-preview/cryostat-rhel8-operator@sha256:ceea652a2e315293571bdca6d4862b02f3d879b49b1c2e1488ec3938a4573c75_arm64 as a component of Cryostat 3 on RHEL 8 | cryostat-tech-preview/cryostat-rhel8-operator@sha256:ceea652a2e315293571bdca6d4862b02f3d879b49b1c2e1488ec3938a4573c75_arm64 |
| Red Hat | cryostat-tech-preview/cryostat-storage-rhel8@sha256:eb689a788e15b45fe72f7fbd910611eeb86629e48aedb9fe5b50e8519523cfee_amd64 as a component of Cryostat 3 on RHEL 8 | cryostat-tech-preview/cryostat-storage-rhel8@sha256:eb689a788e15b45fe72f7fbd910611eeb86629e48aedb9fe5b50e8519523cfee_amd64 |
| Red Hat | cryostat-tech-preview/cryostat-storage-rhel8@sha256:59d1ed4ceb69888c67b612bcd5bea3c1c2174118c49d0b42fc463e4790c5b849_arm64 as a component of Cryostat 3 on RHEL 8 | cryostat-tech-preview/cryostat-storage-rhel8@sha256:59d1ed4ceb69888c67b612bcd5bea3c1c2174118c49d0b42fc463e4790c5b849_arm64 |
| Red Hat | cryostat-tech-preview/cryostat-rhel8@sha256:9dc761a6fa1853f89444062bc5fe5cb372552ee6f10c4c74af6a5939c9394e4b_arm64 as a component of Cryostat 3 on RHEL 8 | cryostat-tech-preview/cryostat-rhel8@sha256:9dc761a6fa1853f89444062bc5fe5cb372552ee6f10c4c74af6a5939c9394e4b_arm64 |
| Red Hat | cryostat-tech-preview/cryostat-reports-rhel8@sha256:7dec56889b09430f459f0de139e278c0b1724abef9eaea34934b737cd1deec80_arm64 as a component of Cryostat 3 on RHEL 8 | * |
| Red Hat | cryostat-tech-preview/cryostat-reports-rhel8@sha256:7dec56889b09430f459f0de139e278c0b1724abef9eaea34934b737cd1deec80_arm64 as a component of Cryostat 3 on RHEL 8 | cryostat-tech-preview/cryostat-reports-rhel8@sha256:7dec56889b09430f459f0de139e278c0b1724abef9eaea34934b737cd1deec80_arm64 |
| Red Hat | cryostat-tech-preview/cryostat-db-rhel8@sha256:27642ac1b50de6deb1c40b9d0b39833b8ec7b36983872ebd10e0edc290967538_arm64 as a component of Cryostat 3 on RHEL 8 | cryostat-tech-preview/cryostat-db-rhel8@sha256:27642ac1b50de6deb1c40b9d0b39833b8ec7b36983872ebd10e0edc290967538_arm64 |
| Red Hat | cryostat-tech-preview/cryostat-grafana-dashboard-rhel8@sha256:21a0f08768e4e19ce4f6d0c50f7afd8251308429a5770cff6dc6be3a878d2fb4_amd64 as a component of Cryostat 3 on RHEL 8 | * |
| Red Hat | cryostat-tech-preview/jfr-datasource-rhel8@sha256:fc6cd0267a89c5fe4e0f7e4a09d566ce34768ef8e2b0b48c6fd69d318a84d425_arm64 as a component of Cryostat 3 on RHEL 8 | cryostat-tech-preview/jfr-datasource-rhel8@sha256:fc6cd0267a89c5fe4e0f7e4a09d566ce34768ef8e2b0b48c6fd69d318a84d425_arm64 |
| Red Hat | cryostat-tech-preview/cryostat-storage-rhel8@sha256:eb689a788e15b45fe72f7fbd910611eeb86629e48aedb9fe5b50e8519523cfee_amd64 as a component of Cryostat 3 on RHEL 8 | cryostat-tech-preview/cryostat-storage-rhel8@sha256:eb689a788e15b45fe72f7fbd910611eeb86629e48aedb9fe5b50e8519523cfee_amd64 |
| Red Hat | cryostat-tech-preview/cryostat-ose-oauth-proxy-rhel8@sha256:679d6c647433974808d48f3ce76ce47921f5c6cd3119d953c853046e39545680_amd64 as a component of Cryostat 3 on RHEL 8 | cryostat-tech-preview/cryostat-ose-oauth-proxy-rhel8@sha256:679d6c647433974808d48f3ce76ce47921f5c6cd3119d953c853046e39545680_amd64 |
| Red Hat | cryostat-tech-preview/cryostat-ose-oauth-proxy-rhel8@sha256:bf93142d4955102b7255a2520d4866e85421f0a39ac93b24d36abff61f7d2a8c_arm64 as a component of Cryostat 3 on RHEL 8 | cryostat-tech-preview/cryostat-ose-oauth-proxy-rhel8@sha256:bf93142d4955102b7255a2520d4866e85421f0a39ac93b24d36abff61f7d2a8c_arm64 |
| Red Hat | cryostat-tech-preview/cryostat-operator-bundle@sha256:37f122a3c9f96ab7aa9c4ad6e0e4beaa50411047b2fdbd7211b70d667b0cb0ca_arm64 as a component of Cryostat 3 on RHEL 8 | * |
| Red Hat | cryostat-tech-preview/cryostat-rhel8@sha256:9dc761a6fa1853f89444062bc5fe5cb372552ee6f10c4c74af6a5939c9394e4b_arm64 as a component of Cryostat 3 on RHEL 8 | cryostat-tech-preview/cryostat-rhel8@sha256:9dc761a6fa1853f89444062bc5fe5cb372552ee6f10c4c74af6a5939c9394e4b_arm64 |
| Red Hat | cryostat-tech-preview/cryostat-db-rhel8@sha256:024661d83d12becbf66ea170dae5ec0f61447912edb04195580731ef342dbd29_amd64 as a component of Cryostat 3 on RHEL 8 | * |
| Red Hat | cryostat-tech-preview/cryostat-storage-rhel8@sha256:59d1ed4ceb69888c67b612bcd5bea3c1c2174118c49d0b42fc463e4790c5b849_arm64 as a component of Cryostat 3 on RHEL 8 | * |
| Red Hat | cryostat-tech-preview/cryostat-reports-rhel8@sha256:eaf9db606e366ea748716ec7b0b8677a876f0fecbb448eaa333b989f52eb8bbb_amd64 as a component of Cryostat 3 on RHEL 8 | cryostat-tech-preview/cryostat-reports-rhel8@sha256:eaf9db606e366ea748716ec7b0b8677a876f0fecbb448eaa333b989f52eb8bbb_amd64 |
| Red Hat | cryostat-tech-preview/cryostat-rhel8-operator@sha256:8ebce6d1a55bec2854e1f7063fb971b9b76305060d325a83554aa75189257859_amd64 as a component of Cryostat 3 on RHEL 8 | * |
…and 16 more
Timeline
- Oct 22, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 30, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:8329 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2301456 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2310527 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2310528 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2310529 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8329.json advisory
- https://access.redhat.com/security/cve/CVE-2024-34155 advisory
- https://www.cve.org/CVERecord?id=CVE-2024-34155 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-34155 advisory
- https://go.dev/cl/611238 advisory
- https://go.dev/issue/69138 advisory
- https://groups.google.com/g/golang-dev/c/S9POB9NCTdk advisory
- https://pkg.go.dev/vuln/GO-2024-3105 advisory
- https://access.redhat.com/security/cve/CVE-2024-34156 advisory
- https://www.cve.org/CVERecord?id=CVE-2024-34156 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-34156 advisory
- https://go.dev/cl/611239 advisory
- https://go.dev/issue/69139 advisory
- https://pkg.go.dev/vuln/GO-2024-3106 advisory
…and 15 more