VDB
RHSA-2024%3A9615
RHSA-2024%3A9615
PUBLISHED
CVSS 5.900000095367432 MEDIUM
A flaw was found in Golang's protobuf module, where the unmarshal function can enter an infinite loop when processing certain invalid inputs. This issue occurs during unmarshaling into a message that includes a google.protobuf.Any or when the UnmarshalOptions.DiscardUnknown option is enabled. This flaw allows an attacker to craft malicious input tailored to trigger the identified flaw in the unmarshal function. By providing carefully constructed invalid inputs, they could potentially cause the function to enter an infinite loop, resulting in a denial of service condition or other unintended behaviors in the affected system.
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-insights-rhel9-operator@sha256:f56593aafb6f16906a7818bced10941628c98208ece6f93fc71c876f1a92c592_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-insights-rhel9-operator@sha256:f56593aafb6f16906a7818bced10941628c98208ece6f93fc71c876f1a92c592_arm64, openshift4/ose-insights-rhel9-operator@sha256:f56593aafb6f16906a7818bced10941628c98208ece6f93fc71c876f1a92c592_arm64, openshift4/ose-insights-rhel9-operator@sha256:f56593aafb6f16906a7818bced10941628c98208ece6f93fc71c876f1a92c592_arm64 |
| Red Hat | openshift4/ose-cluster-openshift-controller-manager-rhel9-operator@sha256:639d0e5a437c7eaad0fe61b8aea672aef6dbf9a9d58b2990c2da0685e2749ae9_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-cluster-openshift-controller-manager-rhel9-operator@sha256:639d0e5a437c7eaad0fe61b8aea672aef6dbf9a9d58b2990c2da0685e2749ae9_ppc64le, *, openshift4/ose-cluster-openshift-controller-manager-rhel9-operator@sha256:639d0e5a437c7eaad0fe61b8aea672aef6dbf9a9d58b2990c2da0685e2749ae9_ppc64le |
| Red Hat | openshift4/ose-aws-cluster-api-controllers-rhel9@sha256:e34b02c45c614f133440f3c91a27476cb5f9a9ad9ef08ef2872afdc614b12739_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-aws-cluster-api-controllers-rhel9@sha256:e34b02c45c614f133440f3c91a27476cb5f9a9ad9ef08ef2872afdc614b12739_arm64, *, * |
| Red Hat | openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:dce56f786162b1b07edeba6a1a279866645883586655c5643156ef4cb7352243_s390x as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:dce56f786162b1b07edeba6a1a279866645883586655c5643156ef4cb7352243_s390x, openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:dce56f786162b1b07edeba6a1a279866645883586655c5643156ef4cb7352243_s390x, openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:dce56f786162b1b07edeba6a1a279866645883586655c5643156ef4cb7352243_s390x |
| Red Hat | openshift4/ose-cluster-openshift-controller-manager-rhel9-operator@sha256:65c2eb98167a444ae910e3c490e0b44a467596d000a5e884d90e4bd14b9a3c27_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-cluster-openshift-controller-manager-rhel9-operator@sha256:65c2eb98167a444ae910e3c490e0b44a467596d000a5e884d90e4bd14b9a3c27_amd64, openshift4/ose-cluster-openshift-controller-manager-rhel9-operator@sha256:65c2eb98167a444ae910e3c490e0b44a467596d000a5e884d90e4bd14b9a3c27_amd64, * |
| Red Hat | openshift4/ose-console-rhel9@sha256:2ef83f80479dd9234579169e53a17f178c5c67fce9fb767c4d75eb26795eb3ae_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-console-rhel9@sha256:2ef83f80479dd9234579169e53a17f178c5c67fce9fb767c4d75eb26795eb3ae_amd64, openshift4/ose-console-rhel9@sha256:2ef83f80479dd9234579169e53a17f178c5c67fce9fb767c4d75eb26795eb3ae_amd64, openshift4/ose-console-rhel9@sha256:2ef83f80479dd9234579169e53a17f178c5c67fce9fb767c4d75eb26795eb3ae_amd64 |
| Red Hat | openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:9352f0a3c96e80b36c1a49035434973e4fd7da35cf18dc064a6166a6ab8bd49e_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | *, openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:9352f0a3c96e80b36c1a49035434973e4fd7da35cf18dc064a6166a6ab8bd49e_amd64, * |
| Red Hat | openshift4/ose-baremetal-installer-rhel9@sha256:1aa16d90b177f94d152c49c2aef1e41afead575dc77813db4d03cc8d6255394b_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-baremetal-installer-rhel9@sha256:1aa16d90b177f94d152c49c2aef1e41afead575dc77813db4d03cc8d6255394b_ppc64le, openshift4/ose-baremetal-installer-rhel9@sha256:1aa16d90b177f94d152c49c2aef1e41afead575dc77813db4d03cc8d6255394b_ppc64le, openshift4/ose-baremetal-installer-rhel9@sha256:1aa16d90b177f94d152c49c2aef1e41afead575dc77813db4d03cc8d6255394b_ppc64le |
| golang | protobuf | |
| Red Hat | openshift4/ose-ovn-kubernetes-rhel9@sha256:f653ee618f8e35c7d69f164eaa244187482e2c8eaa78309748743efa70ebb905_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | *, openshift4/ose-ovn-kubernetes-rhel9@sha256:f653ee618f8e35c7d69f164eaa244187482e2c8eaa78309748743efa70ebb905_arm64, openshift4/ose-ovn-kubernetes-rhel9@sha256:f653ee618f8e35c7d69f164eaa244187482e2c8eaa78309748743efa70ebb905_arm64 |
| Red Hat | openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:b365f4462976f80bf96cd8b68e7424facf1065fbd15f0566cf7bb4e502564958_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:b365f4462976f80bf96cd8b68e7424facf1065fbd15f0566cf7bb4e502564958_ppc64le, openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:b365f4462976f80bf96cd8b68e7424facf1065fbd15f0566cf7bb4e502564958_ppc64le, openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:b365f4462976f80bf96cd8b68e7424facf1065fbd15f0566cf7bb4e502564958_ppc64le |
| Red Hat | openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:26ea2876f7904af1c5873206324a31705dc9d7fe305324c721f042b26d0512b0_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:26ea2876f7904af1c5873206324a31705dc9d7fe305324c721f042b26d0512b0_arm64, openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:26ea2876f7904af1c5873206324a31705dc9d7fe305324c721f042b26d0512b0_arm64, openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:26ea2876f7904af1c5873206324a31705dc9d7fe305324c721f042b26d0512b0_arm64 |
| Red Hat | openshift4/ose-agent-installer-node-agent-rhel9@sha256:c92caffec36af37d9eade5f032ddef8ecf81d0b4d26acd7aaffd7b81a12408e6_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-agent-installer-node-agent-rhel9@sha256:c92caffec36af37d9eade5f032ddef8ecf81d0b4d26acd7aaffd7b81a12408e6_amd64, openshift4/ose-agent-installer-node-agent-rhel9@sha256:c92caffec36af37d9eade5f032ddef8ecf81d0b4d26acd7aaffd7b81a12408e6_amd64, openshift4/ose-agent-installer-node-agent-rhel9@sha256:c92caffec36af37d9eade5f032ddef8ecf81d0b4d26acd7aaffd7b81a12408e6_amd64 |
| Red Hat | openshift4/ose-baremetal-installer-rhel9@sha256:f81bab242ba423355e2ec87636498aba9fc17e534c3e46b9f02068e279083fe2_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | *, *, openshift4/ose-baremetal-installer-rhel9@sha256:f81bab242ba423355e2ec87636498aba9fc17e534c3e46b9f02068e279083fe2_arm64 |
| Red Hat | openshift4/ose-console-rhel9@sha256:2ef83f80479dd9234579169e53a17f178c5c67fce9fb767c4d75eb26795eb3ae_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | *, *, * |
| Red Hat | openshift4/ose-sdn-rhel9@sha256:ff71949fc17158f5ff6c87267a8ccfac4ca998700c544d350000ed290295c868_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | *, *, * |
| Red Hat | openshift4/ose-kube-proxy-rhel9@sha256:6bf90e8cb0d6863f46d59d452be50a6fbc4e6c784cf8ebc8fb05aced9056ceb7_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | *, openshift4/ose-kube-proxy-rhel9@sha256:6bf90e8cb0d6863f46d59d452be50a6fbc4e6c784cf8ebc8fb05aced9056ceb7_arm64, openshift4/ose-kube-proxy-rhel9@sha256:6bf90e8cb0d6863f46d59d452be50a6fbc4e6c784cf8ebc8fb05aced9056ceb7_arm64 |
| Red Hat | rhcos@sha256:33e42871f5de96ddc08b4097e4fc3c0e2c20bc22f38a48b36c11848442dd7ada_x86_64 as a component of Red Hat OpenShift Container Platform 4.16 | rhcos@sha256:33e42871f5de96ddc08b4097e4fc3c0e2c20bc22f38a48b36c11848442dd7ada_x86_64, rhcos@sha256:33e42871f5de96ddc08b4097e4fc3c0e2c20bc22f38a48b36c11848442dd7ada_x86_64, * |
| Red Hat | openshift4/ose-installer-artifacts-rhel9@sha256:b37d191d3ae00836c235b41359f112b9e88647a89a746199bc10281d0737a384_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-installer-artifacts-rhel9@sha256:b37d191d3ae00836c235b41359f112b9e88647a89a746199bc10281d0737a384_arm64, *, * |
| Red Hat | rhcos@sha256:33e42871f5de96ddc08b4097e4fc3c0e2c20bc22f38a48b36c11848442dd7ada_aarch64 as a component of Red Hat OpenShift Container Platform 4.16 | rhcos@sha256:33e42871f5de96ddc08b4097e4fc3c0e2c20bc22f38a48b36c11848442dd7ada_aarch64, *, * |
…and 162 more
Timeline
- Nov 20, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Jul 25, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:9615 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2268046 issue
- https://issues.redhat.com/browse/OCPBUGS-36290 advisory
- https://issues.redhat.com/browse/OCPBUGS-38930 advisory
- https://issues.redhat.com/browse/OCPBUGS-43344 advisory
- https://issues.redhat.com/browse/OCPBUGS-43834 advisory
- https://issues.redhat.com/browse/OCPBUGS-43967 advisory
- https://issues.redhat.com/browse/OCPBUGS-44104 advisory
- https://issues.redhat.com/browse/OCPBUGS-44105 advisory
- https://issues.redhat.com/browse/OCPBUGS-44182 advisory
- https://issues.redhat.com/browse/OCPBUGS-44194 advisory
- https://issues.redhat.com/browse/OCPBUGS-44234 advisory
- https://issues.redhat.com/browse/OCPBUGS-44301 advisory
- https://issues.redhat.com/browse/OCPBUGS-44337 advisory
- https://issues.redhat.com/browse/OCPBUGS-44351 advisory
- https://issues.redhat.com/browse/OCPBUGS-44361 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9615.json advisory
- https://access.redhat.com/security/cve/CVE-2024-24786 advisory
- https://www.cve.org/CVERecord?id=CVE-2024-24786 advisory
…and 4 more