VDB
RHSA-2025:4204
RHSA-2025:4204
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in golang-protobuf. The protojson unmarshaling function can enter an infinite loop when parsing certain invalid JSON inputs, specifically when decoding messages containing Any values or when configured to discard unknown fields. A remote attacker can exploit this vulnerability by submitting specially crafted JSON payloads to cause excessive CPU utilization and hang the application, resulting in a Denial of Service (DoS).
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/openshift-route-controller-manager-rhel9@sha256:1f1f1dd9b78d9dcc9aaf7b4b854ece1b51894667bd67d1c5ffb8e042bfd31bd0_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | *, openshift4/openshift-route-controller-manager-rhel9@sha256:1f1f1dd9b78d9dcc9aaf7b4b854ece1b51894667bd67d1c5ffb8e042bfd31bd0_amd64 |
| Red Hat | openshift4/ose-console-rhel9@sha256:c8309d73bebecebe07ee5c237d4a49da11ad7e269a5e450597169d306f417907_s390x as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-console-rhel9@sha256:c8309d73bebecebe07ee5c237d4a49da11ad7e269a5e450597169d306f417907_s390x, * |
| Red Hat | openshift4/network-tools-rhel9@sha256:84c81eff8f12917e7d778db9dca3205f5d5165ddd740c650a5906fab85d44f2e_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/network-tools-rhel9@sha256:84c81eff8f12917e7d778db9dca3205f5d5165ddd740c650a5906fab85d44f2e_arm64, * |
| Red Hat | openshift4/ose-agent-installer-csr-approver-rhel9@sha256:ee25f07cb35adf60626709a2ee8c7e34777b4dfee09f1abd7214c0760bddb78d_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | *, openshift4/ose-agent-installer-csr-approver-rhel9@sha256:ee25f07cb35adf60626709a2ee8c7e34777b4dfee09f1abd7214c0760bddb78d_ppc64le |
| Red Hat | openshift4/openshift-route-controller-manager-rhel9@sha256:e6093193df2059e175ab93f8bb9ad838df61c63194a9301bb144e98a576f5eae_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/openshift-route-controller-manager-rhel9@sha256:e6093193df2059e175ab93f8bb9ad838df61c63194a9301bb144e98a576f5eae_ppc64le, * |
| Red Hat | openshift4/driver-toolkit-rhel9@sha256:c0469002f7ea21a00b1514b607f63dc289e66e14cd35aa756f5ec2e545aecf4c_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | *, openshift4/driver-toolkit-rhel9@sha256:c0469002f7ea21a00b1514b607f63dc289e66e14cd35aa756f5ec2e545aecf4c_amd64 |
| Red Hat | openshift4/ose-installer-artifacts-rhel9@sha256:bc1fae2a596e5bd25e08a1b057d2fa9dcb2b6416939a1cafee9552ae9106e60b_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-installer-artifacts-rhel9@sha256:bc1fae2a596e5bd25e08a1b057d2fa9dcb2b6416939a1cafee9552ae9106e60b_amd64, * |
| Red Hat | openshift4/ose-installer-artifacts-rhel9@sha256:a2d49d18f195676c1157e5736243eb82bba43b976ecdda2be95166fa73ea9bfa_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-installer-artifacts-rhel9@sha256:a2d49d18f195676c1157e5736243eb82bba43b976ecdda2be95166fa73ea9bfa_ppc64le, * |
| Red Hat | openshift4/ose-networking-console-plugin-rhel9@sha256:9de670f22fdf7f8d91bc01ee2e017a669da090d794eb6d3c23381b53ce5fa011_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | *, openshift4/ose-networking-console-plugin-rhel9@sha256:9de670f22fdf7f8d91bc01ee2e017a669da090d794eb6d3c23381b53ce5fa011_arm64 |
| Red Hat | openshift4/ose-ibmcloud-machine-controllers-rhel9@sha256:68a41cd9f986d1ab1cf8f01c66c30c6b2df51898c8396c5eb5f9317ee3d6fabe_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-ibmcloud-machine-controllers-rhel9@sha256:68a41cd9f986d1ab1cf8f01c66c30c6b2df51898c8396c5eb5f9317ee3d6fabe_amd64, * |
| Red Hat | openshift4/ose-tests-rhel9@sha256:1d80cac7c313fdc12275a0b698f7ed62bb05f7bc47d1840cb0b1addfefedeb8f_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-tests-rhel9@sha256:1d80cac7c313fdc12275a0b698f7ed62bb05f7bc47d1840cb0b1addfefedeb8f_ppc64le, * |
| Red Hat | openshift4/ose-agent-installer-csr-approver-rhel9@sha256:17a25a4d52c6467640fd37a513e6e00f9d2423db94d7dd84dc6af412ec98e373_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-agent-installer-csr-approver-rhel9@sha256:17a25a4d52c6467640fd37a513e6e00f9d2423db94d7dd84dc6af412ec98e373_arm64, * |
| Red Hat | openshift4/ose-agent-installer-api-server-rhel9@sha256:dbe162cf5b28e5b828d6d1576443986a9f2a9e6f86b4d4db2c949713322570a8_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | *, openshift4/ose-agent-installer-api-server-rhel9@sha256:dbe162cf5b28e5b828d6d1576443986a9f2a9e6f86b4d4db2c949713322570a8_ppc64le |
| Red Hat | openshift4/ose-agent-installer-utils-rhel9@sha256:320f1f5e7c0f8b871c7963381508652747efacf9e0003f66838c46c5963e8b8b_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-agent-installer-utils-rhel9@sha256:320f1f5e7c0f8b871c7963381508652747efacf9e0003f66838c46c5963e8b8b_amd64, * |
| Red Hat | openshift4/ose-tests-rhel9@sha256:3469b1f61e7647cbca51af70a48852fef09c73186386a5fe4e11f050942531a5_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | *, openshift4/ose-tests-rhel9@sha256:3469b1f61e7647cbca51af70a48852fef09c73186386a5fe4e11f050942531a5_amd64 |
| Red Hat | openshift4/ose-prometheus-rhel9@sha256:0cde1540da1dacc37760bc5a480fcca711ace0289c28212c936fecfcbd2262cf_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-prometheus-rhel9@sha256:0cde1540da1dacc37760bc5a480fcca711ace0289c28212c936fecfcbd2262cf_ppc64le, * |
| Red Hat | openshift4/ose-ibmcloud-machine-controllers-rhel9@sha256:68a41cd9f986d1ab1cf8f01c66c30c6b2df51898c8396c5eb5f9317ee3d6fabe_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-ibmcloud-machine-controllers-rhel9@sha256:68a41cd9f986d1ab1cf8f01c66c30c6b2df51898c8396c5eb5f9317ee3d6fabe_amd64 |
| Red Hat | openshift4/ose-oauth-proxy-rhel9@sha256:893cdc61a635bae0014eb00aad4101011086e6bc176afe886d1966e0a4d23eb6_s390x as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-oauth-proxy-rhel9@sha256:893cdc61a635bae0014eb00aad4101011086e6bc176afe886d1966e0a4d23eb6_s390x, * |
| Red Hat | openshift4/ose-ovn-kubernetes-rhel9@sha256:c00a12974455cead3c62315bff75c330e381afda09830ebcc00c3e6ef0c0369b_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-ovn-kubernetes-rhel9@sha256:c00a12974455cead3c62315bff75c330e381afda09830ebcc00c3e6ef0c0369b_amd64 |
| Red Hat | openshift4/ose-machine-api-rhel9-operator@sha256:dd52894c7d436e4451c7f4b6a4bd4e869c9086e6063d8794cabfbbe1f353911c_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-machine-api-rhel9-operator@sha256:dd52894c7d436e4451c7f4b6a4bd4e869c9086e6063d8794cabfbbe1f353911c_arm64, * |
…and 202 more
Timeline
- Apr 30, 2025 CVE Published
- Oct 13, 2026 CVE Updated
- Oct 13, 2026 Distribution Patch
- Oct 13, 2026 Distribution Patch
- Oct 13, 2026 Security Advisory
- Oct 13, 2026 Security Advisory
- Oct 13, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2025:4204 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2268046 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2354195 issue
- https://issues.redhat.com/browse/OCPBUGS-43005 advisory
- https://issues.redhat.com/browse/OCPBUGS-52957 advisory
- https://issues.redhat.com/browse/OCPBUGS-52999 advisory
- https://issues.redhat.com/browse/OCPBUGS-53036 advisory
- https://issues.redhat.com/browse/OCPBUGS-53037 advisory
- https://issues.redhat.com/browse/OCPBUGS-53077 advisory
- https://issues.redhat.com/browse/OCPBUGS-54534 advisory
- https://issues.redhat.com/browse/OCPBUGS-54941 advisory
- https://issues.redhat.com/browse/OCPBUGS-54960 advisory
- https://issues.redhat.com/browse/OCPBUGS-55033 advisory
- https://issues.redhat.com/browse/OCPBUGS-55080 advisory
- https://issues.redhat.com/browse/OCPBUGS-55224 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4204.json advisory
- https://access.redhat.com/security/cve/CVE-2024-24786 advisory
- https://www.cve.org/CVERecord?id=CVE-2024-24786 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-24786 advisory
…and 9 more