VDB
RHSA-2025%3A4204
RHSA-2025%3A4204
PUBLISHED
CVSS 5.900000095367432 MEDIUM
A flaw was found in Golang's protobuf module, where the unmarshal function can enter an infinite loop when processing certain invalid inputs. This issue occurs during unmarshaling into a message that includes a google.protobuf.Any or when the UnmarshalOptions.DiscardUnknown option is enabled. This flaw allows an attacker to craft malicious input tailored to trigger the identified flaw in the unmarshal function. By providing carefully constructed invalid inputs, they could potentially cause the function to enter an infinite loop, resulting in a denial of service condition or other unintended behaviors in the affected system.
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/openshift-route-controller-manager-rhel9@sha256:1f1f1dd9b78d9dcc9aaf7b4b854ece1b51894667bd67d1c5ffb8e042bfd31bd0_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/openshift-route-controller-manager-rhel9@sha256:1f1f1dd9b78d9dcc9aaf7b4b854ece1b51894667bd67d1c5ffb8e042bfd31bd0_amd64, openshift4/openshift-route-controller-manager-rhel9@sha256:1f1f1dd9b78d9dcc9aaf7b4b854ece1b51894667bd67d1c5ffb8e042bfd31bd0_amd64, openshift4/openshift-route-controller-manager-rhel9@sha256:1f1f1dd9b78d9dcc9aaf7b4b854ece1b51894667bd67d1c5ffb8e042bfd31bd0_amd64 |
| Red Hat | openshift4/ose-console-rhel9@sha256:c8309d73bebecebe07ee5c237d4a49da11ad7e269a5e450597169d306f417907_s390x as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-console-rhel9@sha256:c8309d73bebecebe07ee5c237d4a49da11ad7e269a5e450597169d306f417907_s390x, *, openshift4/ose-console-rhel9@sha256:c8309d73bebecebe07ee5c237d4a49da11ad7e269a5e450597169d306f417907_s390x |
| Red Hat | openshift4/network-tools-rhel9@sha256:84c81eff8f12917e7d778db9dca3205f5d5165ddd740c650a5906fab85d44f2e_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/network-tools-rhel9@sha256:84c81eff8f12917e7d778db9dca3205f5d5165ddd740c650a5906fab85d44f2e_arm64, openshift4/network-tools-rhel9@sha256:84c81eff8f12917e7d778db9dca3205f5d5165ddd740c650a5906fab85d44f2e_arm64, openshift4/network-tools-rhel9@sha256:84c81eff8f12917e7d778db9dca3205f5d5165ddd740c650a5906fab85d44f2e_arm64 |
| Red Hat | openshift4/ose-agent-installer-csr-approver-rhel9@sha256:ee25f07cb35adf60626709a2ee8c7e34777b4dfee09f1abd7214c0760bddb78d_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | *, *, openshift4/ose-agent-installer-csr-approver-rhel9@sha256:ee25f07cb35adf60626709a2ee8c7e34777b4dfee09f1abd7214c0760bddb78d_ppc64le |
| Red Hat | openshift4/openshift-route-controller-manager-rhel9@sha256:e6093193df2059e175ab93f8bb9ad838df61c63194a9301bb144e98a576f5eae_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/openshift-route-controller-manager-rhel9@sha256:e6093193df2059e175ab93f8bb9ad838df61c63194a9301bb144e98a576f5eae_ppc64le, *, * |
| Red Hat | openshift4/driver-toolkit-rhel9@sha256:c0469002f7ea21a00b1514b607f63dc289e66e14cd35aa756f5ec2e545aecf4c_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | *, openshift4/driver-toolkit-rhel9@sha256:c0469002f7ea21a00b1514b607f63dc289e66e14cd35aa756f5ec2e545aecf4c_amd64, openshift4/driver-toolkit-rhel9@sha256:c0469002f7ea21a00b1514b607f63dc289e66e14cd35aa756f5ec2e545aecf4c_amd64 |
| Red Hat | openshift4/ose-installer-artifacts-rhel9@sha256:bc1fae2a596e5bd25e08a1b057d2fa9dcb2b6416939a1cafee9552ae9106e60b_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-installer-artifacts-rhel9@sha256:bc1fae2a596e5bd25e08a1b057d2fa9dcb2b6416939a1cafee9552ae9106e60b_amd64, *, * |
| Red Hat | openshift4/ose-installer-artifacts-rhel9@sha256:a2d49d18f195676c1157e5736243eb82bba43b976ecdda2be95166fa73ea9bfa_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | *, openshift4/ose-installer-artifacts-rhel9@sha256:a2d49d18f195676c1157e5736243eb82bba43b976ecdda2be95166fa73ea9bfa_ppc64le, * |
| Red Hat | openshift4/ose-networking-console-plugin-rhel9@sha256:9de670f22fdf7f8d91bc01ee2e017a669da090d794eb6d3c23381b53ce5fa011_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | *, openshift4/ose-networking-console-plugin-rhel9@sha256:9de670f22fdf7f8d91bc01ee2e017a669da090d794eb6d3c23381b53ce5fa011_arm64, * |
| Red Hat | openshift4/ose-ibmcloud-machine-controllers-rhel9@sha256:68a41cd9f986d1ab1cf8f01c66c30c6b2df51898c8396c5eb5f9317ee3d6fabe_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-ibmcloud-machine-controllers-rhel9@sha256:68a41cd9f986d1ab1cf8f01c66c30c6b2df51898c8396c5eb5f9317ee3d6fabe_amd64, *, * |
| Red Hat | openshift4/ose-tests-rhel9@sha256:1d80cac7c313fdc12275a0b698f7ed62bb05f7bc47d1840cb0b1addfefedeb8f_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-tests-rhel9@sha256:1d80cac7c313fdc12275a0b698f7ed62bb05f7bc47d1840cb0b1addfefedeb8f_ppc64le, *, openshift4/ose-tests-rhel9@sha256:1d80cac7c313fdc12275a0b698f7ed62bb05f7bc47d1840cb0b1addfefedeb8f_ppc64le |
| Red Hat | openshift4/ose-agent-installer-csr-approver-rhel9@sha256:17a25a4d52c6467640fd37a513e6e00f9d2423db94d7dd84dc6af412ec98e373_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | *, *, openshift4/ose-agent-installer-csr-approver-rhel9@sha256:17a25a4d52c6467640fd37a513e6e00f9d2423db94d7dd84dc6af412ec98e373_arm64 |
| Red Hat | openshift4/ose-agent-installer-api-server-rhel9@sha256:dbe162cf5b28e5b828d6d1576443986a9f2a9e6f86b4d4db2c949713322570a8_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-agent-installer-api-server-rhel9@sha256:dbe162cf5b28e5b828d6d1576443986a9f2a9e6f86b4d4db2c949713322570a8_ppc64le, openshift4/ose-agent-installer-api-server-rhel9@sha256:dbe162cf5b28e5b828d6d1576443986a9f2a9e6f86b4d4db2c949713322570a8_ppc64le, openshift4/ose-agent-installer-api-server-rhel9@sha256:dbe162cf5b28e5b828d6d1576443986a9f2a9e6f86b4d4db2c949713322570a8_ppc64le |
| Red Hat | openshift4/ose-agent-installer-utils-rhel9@sha256:320f1f5e7c0f8b871c7963381508652747efacf9e0003f66838c46c5963e8b8b_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-agent-installer-utils-rhel9@sha256:320f1f5e7c0f8b871c7963381508652747efacf9e0003f66838c46c5963e8b8b_amd64, *, * |
| Red Hat | openshift4/ose-tests-rhel9@sha256:3469b1f61e7647cbca51af70a48852fef09c73186386a5fe4e11f050942531a5_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | *, *, openshift4/ose-tests-rhel9@sha256:3469b1f61e7647cbca51af70a48852fef09c73186386a5fe4e11f050942531a5_amd64 |
| Red Hat | openshift4/ose-prometheus-rhel9@sha256:0cde1540da1dacc37760bc5a480fcca711ace0289c28212c936fecfcbd2262cf_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | *, *, * |
| Red Hat | openshift4/ose-ibmcloud-machine-controllers-rhel9@sha256:68a41cd9f986d1ab1cf8f01c66c30c6b2df51898c8396c5eb5f9317ee3d6fabe_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-ibmcloud-machine-controllers-rhel9@sha256:68a41cd9f986d1ab1cf8f01c66c30c6b2df51898c8396c5eb5f9317ee3d6fabe_amd64, openshift4/ose-ibmcloud-machine-controllers-rhel9@sha256:68a41cd9f986d1ab1cf8f01c66c30c6b2df51898c8396c5eb5f9317ee3d6fabe_amd64, openshift4/ose-ibmcloud-machine-controllers-rhel9@sha256:68a41cd9f986d1ab1cf8f01c66c30c6b2df51898c8396c5eb5f9317ee3d6fabe_amd64 |
| Red Hat | openshift4/ose-oauth-proxy-rhel9@sha256:893cdc61a635bae0014eb00aad4101011086e6bc176afe886d1966e0a4d23eb6_s390x as a component of Red Hat OpenShift Container Platform 4.17 | *, openshift4/ose-oauth-proxy-rhel9@sha256:893cdc61a635bae0014eb00aad4101011086e6bc176afe886d1966e0a4d23eb6_s390x, openshift4/ose-oauth-proxy-rhel9@sha256:893cdc61a635bae0014eb00aad4101011086e6bc176afe886d1966e0a4d23eb6_s390x |
| Red Hat | openshift4/ose-ovn-kubernetes-rhel9@sha256:c00a12974455cead3c62315bff75c330e381afda09830ebcc00c3e6ef0c0369b_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-ovn-kubernetes-rhel9@sha256:c00a12974455cead3c62315bff75c330e381afda09830ebcc00c3e6ef0c0369b_amd64, openshift4/ose-ovn-kubernetes-rhel9@sha256:c00a12974455cead3c62315bff75c330e381afda09830ebcc00c3e6ef0c0369b_amd64, openshift4/ose-ovn-kubernetes-rhel9@sha256:c00a12974455cead3c62315bff75c330e381afda09830ebcc00c3e6ef0c0369b_amd64 |
| Red Hat | openshift4/ose-machine-api-rhel9-operator@sha256:dd52894c7d436e4451c7f4b6a4bd4e869c9086e6063d8794cabfbbe1f353911c_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-machine-api-rhel9-operator@sha256:dd52894c7d436e4451c7f4b6a4bd4e869c9086e6063d8794cabfbbe1f353911c_arm64, openshift4/ose-machine-api-rhel9-operator@sha256:dd52894c7d436e4451c7f4b6a4bd4e869c9086e6063d8794cabfbbe1f353911c_arm64, openshift4/ose-machine-api-rhel9-operator@sha256:dd52894c7d436e4451c7f4b6a4bd4e869c9086e6063d8794cabfbbe1f353911c_arm64 |
…and 202 more
Timeline
- Apr 30, 2025 CVE Published
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Jul 25, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2025:4204 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2268046 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2354195 issue
- https://issues.redhat.com/browse/OCPBUGS-43005 advisory
- https://issues.redhat.com/browse/OCPBUGS-52957 advisory
- https://issues.redhat.com/browse/OCPBUGS-52999 advisory
- https://issues.redhat.com/browse/OCPBUGS-53036 advisory
- https://issues.redhat.com/browse/OCPBUGS-53037 advisory
- https://issues.redhat.com/browse/OCPBUGS-53077 advisory
- https://issues.redhat.com/browse/OCPBUGS-54534 advisory
- https://issues.redhat.com/browse/OCPBUGS-54941 advisory
- https://issues.redhat.com/browse/OCPBUGS-54960 advisory
- https://issues.redhat.com/browse/OCPBUGS-55033 advisory
- https://issues.redhat.com/browse/OCPBUGS-55080 advisory
- https://issues.redhat.com/browse/OCPBUGS-55224 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4204.json advisory
- https://access.redhat.com/security/cve/CVE-2024-24786 advisory
- https://www.cve.org/CVERecord?id=CVE-2024-24786 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-24786 advisory
…and 9 more