VDB
RHSA-2024%3A8434
RHSA-2024%3A8434
PUBLISHED
CVSS 5.900000095367432 MEDIUM
A flaw was found in Golang's protobuf module, where the unmarshal function can enter an infinite loop when processing certain invalid inputs. This issue occurs during unmarshaling into a message that includes a google.protobuf.Any or when the UnmarshalOptions.DiscardUnknown option is enabled. This flaw allows an attacker to craft malicious input tailored to trigger the identified flaw in the unmarshal function. By providing carefully constructed invalid inputs, they could potentially cause the function to enter an infinite loop, resulting in a denial of service condition or other unintended behaviors in the affected system.
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-monitoring-plugin-rhel9@sha256:941426a96c69b00cd744beb04630ea523954b8b14ec2c19187d514d936d82636_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-monitoring-plugin-rhel9@sha256:941426a96c69b00cd744beb04630ea523954b8b14ec2c19187d514d936d82636_arm64, *, * |
| Red Hat | openshift4/ose-cluster-monitoring-rhel9-operator@sha256:4336e1a3701795d1ad0e73e99c7d085e10dfcde205e975fd8f269e331826d92d_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | *, openshift4/ose-cluster-monitoring-rhel9-operator@sha256:4336e1a3701795d1ad0e73e99c7d085e10dfcde205e975fd8f269e331826d92d_arm64, openshift4/ose-cluster-monitoring-rhel9-operator@sha256:4336e1a3701795d1ad0e73e99c7d085e10dfcde205e975fd8f269e331826d92d_arm64 |
| Red Hat | openshift4/ose-cluster-image-registry-rhel9-operator@sha256:5a74af48c1b375fe0dd41acf84e3e2094d88b2d016ca99537fc550689965424f_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-cluster-image-registry-rhel9-operator@sha256:5a74af48c1b375fe0dd41acf84e3e2094d88b2d016ca99537fc550689965424f_ppc64le, openshift4/ose-cluster-image-registry-rhel9-operator@sha256:5a74af48c1b375fe0dd41acf84e3e2094d88b2d016ca99537fc550689965424f_ppc64le, openshift4/ose-cluster-image-registry-rhel9-operator@sha256:5a74af48c1b375fe0dd41acf84e3e2094d88b2d016ca99537fc550689965424f_ppc64le |
| Red Hat | openshift4/ose-cli-artifacts-rhel9@sha256:29ebead26b6ac9038be71af639021b9974c353e2f92b43fc0922d1f9e7efc787_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-cli-artifacts-rhel9@sha256:29ebead26b6ac9038be71af639021b9974c353e2f92b43fc0922d1f9e7efc787_amd64, *, * |
| Red Hat | openshift4/ose-networking-console-plugin-rhel9@sha256:f361e50b2003360e64b5ef917114afbe060661af9028abc016de78038da30d42_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-networking-console-plugin-rhel9@sha256:f361e50b2003360e64b5ef917114afbe060661af9028abc016de78038da30d42_amd64, openshift4/ose-networking-console-plugin-rhel9@sha256:f361e50b2003360e64b5ef917114afbe060661af9028abc016de78038da30d42_amd64, openshift4/ose-networking-console-plugin-rhel9@sha256:f361e50b2003360e64b5ef917114afbe060661af9028abc016de78038da30d42_amd64 |
| Red Hat | openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:e9f982e5a16884f121a7fadfcd8f1ef4ba4d33772f50b297041024f8dbd21fe9_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | *, *, * |
| Red Hat | openshift4/ose-installer-rhel9@sha256:1561d84185e295ede27cfc4e76f705ca3087097acced63ccd377ea9f70bce8cd_s390x as a component of Red Hat OpenShift Container Platform 4.17 | *, openshift4/ose-installer-rhel9@sha256:1561d84185e295ede27cfc4e76f705ca3087097acced63ccd377ea9f70bce8cd_s390x, openshift4/ose-installer-rhel9@sha256:1561d84185e295ede27cfc4e76f705ca3087097acced63ccd377ea9f70bce8cd_s390x |
| Red Hat | openshift4/ose-cluster-network-rhel9-operator@sha256:0a398b2532f8d70c610d17d8e713b55df129b16f2260b4fea65aadd5e75c04aa_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | *, *, openshift4/ose-cluster-network-rhel9-operator@sha256:0a398b2532f8d70c610d17d8e713b55df129b16f2260b4fea65aadd5e75c04aa_ppc64le |
| Red Hat | openshift4/ose-openstack-cluster-api-controllers-rhel9@sha256:d85a62c0f9b8b65e4983c233abf6b28acce3724374de1d7e96ea99c012d9e4b1_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-openstack-cluster-api-controllers-rhel9@sha256:d85a62c0f9b8b65e4983c233abf6b28acce3724374de1d7e96ea99c012d9e4b1_arm64, openshift4/ose-openstack-cluster-api-controllers-rhel9@sha256:d85a62c0f9b8b65e4983c233abf6b28acce3724374de1d7e96ea99c012d9e4b1_arm64, openshift4/ose-openstack-cluster-api-controllers-rhel9@sha256:d85a62c0f9b8b65e4983c233abf6b28acce3724374de1d7e96ea99c012d9e4b1_arm64 |
| Red Hat | rhcos@sha256:d3284e172a30e41c264f43fe01840566596662fb1fc4b51923bdddf6bfbf904b_aarch64 as a component of Red Hat OpenShift Container Platform 4.17 | *, rhcos@sha256:d3284e172a30e41c264f43fe01840566596662fb1fc4b51923bdddf6bfbf904b_aarch64, rhcos@sha256:d3284e172a30e41c264f43fe01840566596662fb1fc4b51923bdddf6bfbf904b_aarch64 |
| Red Hat | openshift4/ose-cluster-cloud-controller-manager-rhel9-operator@sha256:808cf94a34596acba84bfc6dc57b5a26ac7bf6a6b340d5d59995b90ccaf8e045_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-cluster-cloud-controller-manager-rhel9-operator@sha256:808cf94a34596acba84bfc6dc57b5a26ac7bf6a6b340d5d59995b90ccaf8e045_ppc64le, openshift4/ose-cluster-cloud-controller-manager-rhel9-operator@sha256:808cf94a34596acba84bfc6dc57b5a26ac7bf6a6b340d5d59995b90ccaf8e045_ppc64le, openshift4/ose-cluster-cloud-controller-manager-rhel9-operator@sha256:808cf94a34596acba84bfc6dc57b5a26ac7bf6a6b340d5d59995b90ccaf8e045_ppc64le |
| Red Hat | openshift4/ose-installer-artifacts-rhel9@sha256:1cff10d33d37abe27ad06818146effbdc3877f7a595f79f76568d87f31d84dc2_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-installer-artifacts-rhel9@sha256:1cff10d33d37abe27ad06818146effbdc3877f7a595f79f76568d87f31d84dc2_arm64, *, openshift4/ose-installer-artifacts-rhel9@sha256:1cff10d33d37abe27ad06818146effbdc3877f7a595f79f76568d87f31d84dc2_arm64 |
| Red Hat | openshift4/ose-cloud-credential-rhel9-operator@sha256:b4af08b8e0415d2b56e2a29c432a91ee57d11b8ef54b4125824b19fb7d29a68b_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | *, *, * |
| Red Hat | openshift4/ose-ovn-kubernetes-rhel9@sha256:61dad76c218207d8b47d2ed8ecf86c4380ebf7a4fb90928b15219feefc6a1e05_s390x as a component of Red Hat OpenShift Container Platform 4.17 | *, openshift4/ose-ovn-kubernetes-rhel9@sha256:61dad76c218207d8b47d2ed8ecf86c4380ebf7a4fb90928b15219feefc6a1e05_s390x, openshift4/ose-ovn-kubernetes-rhel9@sha256:61dad76c218207d8b47d2ed8ecf86c4380ebf7a4fb90928b15219feefc6a1e05_s390x |
| Red Hat | openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:6862738cc9a4dbcd1767b6a6fb5c033ae9efa9a065091eeb0361fec564bde807_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:6862738cc9a4dbcd1767b6a6fb5c033ae9efa9a065091eeb0361fec564bde807_amd64, openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:6862738cc9a4dbcd1767b6a6fb5c033ae9efa9a065091eeb0361fec564bde807_amd64, openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:6862738cc9a4dbcd1767b6a6fb5c033ae9efa9a065091eeb0361fec564bde807_amd64 |
| Red Hat | openshift4/ose-vsphere-csi-driver-rhel9-operator@sha256:7bb93afc7fa1d60d5583a715f8a35f93babe6f347dee32c22b89517a00473ffa_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-vsphere-csi-driver-rhel9-operator@sha256:7bb93afc7fa1d60d5583a715f8a35f93babe6f347dee32c22b89517a00473ffa_amd64, openshift4/ose-vsphere-csi-driver-rhel9-operator@sha256:7bb93afc7fa1d60d5583a715f8a35f93babe6f347dee32c22b89517a00473ffa_amd64, openshift4/ose-vsphere-csi-driver-rhel9-operator@sha256:7bb93afc7fa1d60d5583a715f8a35f93babe6f347dee32c22b89517a00473ffa_amd64 |
| Red Hat | openshift4/ose-tests-rhel9@sha256:aa9fb893e615ea39c7fee40421713dd572f9191f98ba4811db97c3e739e11b10_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-tests-rhel9@sha256:aa9fb893e615ea39c7fee40421713dd572f9191f98ba4811db97c3e739e11b10_arm64, openshift4/ose-tests-rhel9@sha256:aa9fb893e615ea39c7fee40421713dd572f9191f98ba4811db97c3e739e11b10_arm64, * |
| Red Hat | openshift4/ose-machine-config-rhel9-operator@sha256:c38f0a7187f22024319f754224dbd0adddc59953e70fb4797c8c062c44e7dff8_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-machine-config-rhel9-operator@sha256:c38f0a7187f22024319f754224dbd0adddc59953e70fb4797c8c062c44e7dff8_ppc64le, *, openshift4/ose-machine-config-rhel9-operator@sha256:c38f0a7187f22024319f754224dbd0adddc59953e70fb4797c8c062c44e7dff8_ppc64le |
| Red Hat | openshift4/ose-cluster-cloud-controller-manager-rhel9-operator@sha256:79bf844766182780c422ab768f4f62846a6007114061386072fc1661dfc3f390_s390x as a component of Red Hat OpenShift Container Platform 4.17 | *, openshift4/ose-cluster-cloud-controller-manager-rhel9-operator@sha256:79bf844766182780c422ab768f4f62846a6007114061386072fc1661dfc3f390_s390x, openshift4/ose-cluster-cloud-controller-manager-rhel9-operator@sha256:79bf844766182780c422ab768f4f62846a6007114061386072fc1661dfc3f390_s390x |
| Red Hat | openshift4/ose-openstack-cluster-api-controllers-rhel9@sha256:f82ce041ba7d9c64479f714600e72b8044ff5c1c456dc9b0fb2a8c6ab642e121_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-openstack-cluster-api-controllers-rhel9@sha256:f82ce041ba7d9c64479f714600e72b8044ff5c1c456dc9b0fb2a8c6ab642e121_ppc64le, openshift4/ose-openstack-cluster-api-controllers-rhel9@sha256:f82ce041ba7d9c64479f714600e72b8044ff5c1c456dc9b0fb2a8c6ab642e121_ppc64le, openshift4/ose-openstack-cluster-api-controllers-rhel9@sha256:f82ce041ba7d9c64479f714600e72b8044ff5c1c456dc9b0fb2a8c6ab642e121_ppc64le |
…and 248 more
Timeline
- Oct 29, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 16, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:8434 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2268046 issue
- https://issues.redhat.com/browse/OCPBUGS-29698 advisory
- https://issues.redhat.com/browse/OCPBUGS-34277 advisory
- https://issues.redhat.com/browse/OCPBUGS-34310 advisory
- https://issues.redhat.com/browse/OCPBUGS-39121 advisory
- https://issues.redhat.com/browse/OCPBUGS-41621 advisory
- https://issues.redhat.com/browse/OCPBUGS-41722 advisory
- https://issues.redhat.com/browse/OCPBUGS-41812 advisory
- https://issues.redhat.com/browse/OCPBUGS-42108 advisory
- https://issues.redhat.com/browse/OCPBUGS-42327 advisory
- https://issues.redhat.com/browse/OCPBUGS-42474 advisory
- https://issues.redhat.com/browse/OCPBUGS-42638 advisory
- https://issues.redhat.com/browse/OCPBUGS-42704 advisory
- https://issues.redhat.com/browse/OCPBUGS-42794 advisory
- https://issues.redhat.com/browse/OCPBUGS-42876 advisory
- https://issues.redhat.com/browse/OCPBUGS-42955 advisory
- https://issues.redhat.com/browse/OCPBUGS-42979 advisory
- https://issues.redhat.com/browse/OCPBUGS-43088 advisory
…and 18 more