The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade fuse-overlayfsUpgrade podmanUpgrade skopeo-testsUpgrade podman-catatonitUpgrade criuUpgrade criu-develUpgrade libslirpUpgrade python3-podmanUpgrade podman-testsUpgrade skopeoUpgrade podman-pluginsUpgrade crunUpgrade netavarkUpgrade toolboxUpgrade podman-gvproxyUpgrade podman-dockerUpgrade slirp4netnsUpgrade conmonUpgrade toolbox-testsUpgrade containers-commonUpgrade udicaUpgrade critUpgrade podman-remoteUpgrade buildahUpgrade criu-libsUpgrade cockpit-podmanUpgrade buildah-testsUpgrade aardvark-dnsUpgrade oci-seccomp-bpf-hookUpgrade container-selinuxUpgrade runcUpgrade libslirp-develUpgrade python3-criuUpgrade containernetworking-plugins | May 8, 2024 | Mar 5, 2024 |
| Alpine Linux | — | Upgrade buildah | Aug 22, 2024 | Mar 5, 2024 |
| Amazon Linux Ami 2 | — | Upgrade dockerUpgrade docker-debuginfoUpgrade nerdctl-debuginfoUpgrade cri-toolsUpgrade amazon-cloudwatch-agentUpgrade containerdUpgrade containerd-stressUpgrade containerd-debuginfoUpgrade nerdctlUpgrade cri-tools-debuginfo | May 31, 2024 | Mar 5, 2024 |
| Amazon_linux_2023 | — | Upgrade nerdctlUpgrade containerd-stress-debuginfoUpgrade containerd-debuginfoUpgrade dockerUpgrade containerdUpgrade containerd-debugsourceUpgrade containerd-stressUpgrade amazon-cloudwatch-agentUpgrade docker-debuginfoUpgrade docker-debugsource | Feb 17, 2025 | Mar 5, 2024 |
| Centos_linux | — | Upgrade rhc-worker-script | Apr 19, 2024 | Mar 5, 2024 |
| Debian | — | Upgrade golang-google-protobuf | May 15, 2025 | Mar 5, 2024 |
| F5 Big Ip | — | — | Sep 23, 2024 | Mar 5, 2024 |
| Freebsd | — | Upgrade oauth2-proxy | Oct 22, 2024 | Oct 18, 2024 |
| Gentoo Linux | — | Upgrade app-containers/buildah.Upgrade app-containers/podman. | Jul 9, 2024 | Mar 5, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Aug 22, 2025 |
| Oracle_linux | — | Upgrade kubectlUpgrade olcne-gluster-chartUpgrade conmonUpgrade podman-pluginsUpgrade podman-catatonitUpgrade podmanUpgrade cri-toolsUpgrade olcne-oci-ccm-chartUpgrade criuUpgrade libslirpUpgrade etcdUpgrade crunUpgrade skopeoUpgrade olcne-olm-chartUpgrade netavarkUpgrade oci-seccomp-bpf-hookUpgrade python3-podmanUpgrade skopeo-testsUpgrade criu-develUpgrade istioUpgrade udicaUpgrade olcne-agentUpgrade olcne-api-serverUpgrade olcne-multus-chartUpgrade podman-testsUpgrade containers-commonUpgrade criu-libsUpgrade libslirp-develUpgrade kubeletUpgrade containernetworking-pluginsUpgrade slirp4netnsUpgrade podman-gvproxyUpgrade kubeadmUpgrade podman-dockerUpgrade cockpit-podmanUpgrade python3-criuUpgrade cri-oUpgrade olcne-grafana-chartUpgrade buildah-testsUpgrade buildahUpgrade olcne-prometheus-chartUpgrade olcne-metallb-chartUpgrade olcne-utilsUpgrade container-selinuxUpgrade podman-remoteUpgrade olcne-nginxUpgrade olcne-istio-chartUpgrade critUpgrade olcnectlUpgrade fuse-overlayfsUpgrade aardvark-dnsUpgrade istio-istioctlUpgrade olcne-kubevirt-chartUpgrade runcUpgrade olcne-rook-chartUpgrade olcne-calico-chart | Apr 17, 2024 | Mar 5, 2024 |
| Redhat Openshift | — | Upgrade microshiftUpgrade podmanUpgrade openshiftUpgrade cri-toolsUpgrade ose-azure-acr-image-credential-providerUpgrade cri-oUpgrade ose-gcp-gcr-image-credential-provider | Mar 28, 2024 | Mar 5, 2024 |
| Redhat_linux | — | Upgrade cockpit-podmanUpgrade python3-criuUpgrade buildah-debugsourceUpgrade skopeo-debuginfoUpgrade toolbox-debuginfoUpgrade podman-dockerUpgrade criu-libs-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-plugins-debuginfoUpgrade toolbox-debugsourceUpgrade toolboxUpgrade udicaUpgrade podman-gvproxyUpgrade podman-catatonitUpgrade toolbox-testsUpgrade critUpgrade slirp4netns-debuginfoUpgrade criu-develUpgrade rhc-worker-scriptUpgrade crunUpgrade runcUpgrade podman-remoteUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade container-selinuxUpgrade conmonUpgrade podman-catatonit-debuginfoUpgrade libslirpNo solution existsUpgrade slirp4netnsUpgrade containernetworking-plugins-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podman-pluginsUpgrade podman-debuginfoUpgrade skopeo-testsUpgrade podman-testsUpgrade containernetworking-plugins-debugsourceUpgrade podman-debugsourceUpgrade libslirp-debuginfoUpgrade libslirp-debugsourceUpgrade podmanUpgrade containers-commonUpgrade fuse-overlayfs-debuginfoUpgrade crun-debugsourceUpgrade fuse-overlayfsUpgrade skopeo-debugsourceUpgrade containernetworking-pluginsUpgrade buildah-tests-debuginfoUpgrade criu-libsUpgrade skopeoUpgrade python3-podmanUpgrade podman-remote-debuginfoUpgrade runc-debuginfoUpgrade criu-debuginfoUpgrade conmon-debuginfoUpgrade criuUpgrade buildah-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade criu-debugsourceUpgrade buildah-testsUpgrade netavarkUpgrade conmon-debugsourceUpgrade libslirp-develUpgrade runc-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade crun-debuginfoUpgrade aardvark-dnsUpgrade buildah | Apr 19, 2024 | Mar 5, 2024 |
| Rocky_linux | — | Upgrade oci-seccomp-bpf-hook-debuginfoUpgrade buildahUpgrade conmon-debugsourceUpgrade podmanUpgrade runcUpgrade criuUpgrade buildah-debuginfoUpgrade podman-remote-debuginfoUpgrade toolbox-testsUpgrade python3-criuUpgrade toolbox-debugsourceUpgrade containernetworking-pluginsUpgrade criu-libs-debuginfoUpgrade fuse-overlayfsUpgrade slirp4netns-debuginfoUpgrade skopeo-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade skopeoUpgrade critUpgrade runc-debugsourceUpgrade podman-catatonitUpgrade libslirp-debuginfoUpgrade podman-catatonit-debuginfoUpgrade criu-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade aardvark-dnsUpgrade podman-debuginfoUpgrade toolboxUpgrade toolbox-debuginfoUpgrade podman-remoteUpgrade crunUpgrade crun-debugsourceUpgrade buildah-debugsourceUpgrade podman-pluginsUpgrade libslirp-debugsourceUpgrade skopeo-debuginfoUpgrade netavarkUpgrade buildah-tests-debuginfoUpgrade slirp4netnsUpgrade podman-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade podman-plugins-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crun-debuginfoUpgrade criu-libsUpgrade criu-develUpgrade conmonUpgrade podman-gvproxyUpgrade containernetworking-plugins-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade libslirp-develUpgrade podman-testsUpgrade containers-commonUpgrade conmon-debuginfoUpgrade skopeo-testsUpgrade runc-debuginfoUpgrade buildah-testsUpgrade oci-seccomp-bpf-hookUpgrade criu-debuginfoUpgrade slirp4netns-debugsourceUpgrade libslirp | May 13, 2024 | Mar 5, 2024 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.2.3Upgrade Splunk Enterprise to version 9.3.1Upgrade Splunk Enterprise to version 9.1.6 | Jul 30, 2026 | Mar 5, 2024 |
| Suse | — | Upgrade kubernetes1.24-kubelet-commonUpgrade kubernetes1.25-client-commonUpgrade podman-dockerUpgrade kubernetes1.26-kubeadmUpgrade rclone-bash-completionUpgrade kubernetes1.27-client-commonUpgrade kubernetes1.26-kubelet-commonUpgrade kubernetes1.26-schedulerUpgrade kubernetes1.27-kubeletUpgrade kubernetes1.24-kubeadmUpgrade kubernetes1.28-client-fish-completionUpgrade kubernetes1.26-client-commonUpgrade kubernetes1.28-kubelet-commonUpgrade docker-zsh-completionUpgrade buildahUpgrade kubernetes1.24-schedulerUpgrade kubernetes1.27-client-fish-completionUpgrade kubernetes1.25-clientUpgrade kubernetes1.28-controller-managerUpgrade docker-bash-completionUpgrade kubernetes1.25-apiserverUpgrade kubernetes1.27-kubeadmUpgrade kubernetes1.27-apiserverUpgrade kubernetes1.27-kubelet-commonUpgrade kubernetes1.26-client-bash-completionUpgrade kubernetes1.25-kubeletUpgrade kubernetes1.25-proxyUpgrade kubernetes1.28-client-commonUpgrade kubernetes1.28-apiserverUpgrade kubernetes1.29-clientUpgrade kubernetes1.27-controller-managerUpgrade kubernetes1.28-schedulerUpgrade kubernetes1.25-kubelet-commonUpgrade kubernetes1.28-proxyUpgrade kubernetes1.24-client-bash-completionUpgrade rcloneUpgrade velociraptor-clientUpgrade kubernetes1.29-client-commonUpgrade kubernetes1.27-schedulerUpgrade dockerUpgrade kubernetes1.28-client-bash-completionUpgrade podman-remoteUpgrade kubernetes1.25-client-fish-completionUpgrade velociraptorUpgrade rclone-zsh-completionUpgrade kubernetes1.28-kubeletUpgrade kubernetes1.28-clientUpgrade kubernetes1.26-controller-managerUpgrade kubernetes1.26-clientUpgrade kubernetes1.25-controller-managerUpgrade kubernetes1.24-kubeletUpgrade kubernetes1.26-client-fish-completionUpgrade kubernetes1.24-client-commonUpgrade podmanshUpgrade kubernetes1.27-proxyUpgrade kubernetes1.27-client-bash-completionUpgrade system-user-velociraptorUpgrade kubernetes1.26-proxyUpgrade kubernetes1.25-client-bash-completionUpgrade kubernetes1.24-proxyUpgrade kubernetes1.26-kubeletUpgrade kubernetes1.25-kubeadmUpgrade podmanUpgrade kubernetes1.28-kubeadmUpgrade kubernetes1.24-apiserverUpgrade kubernetes1.24-clientUpgrade kubernetes1.25-schedulerUpgrade kubernetes1.27-clientUpgrade kubernetes1.24-client-fish-completionUpgrade docker-fish-completionUpgrade docker-rootless-extrasUpgrade kubernetes1.24-controller-managerUpgrade kubernetes1.26-apiserver | Jun 17, 2024 | Mar 5, 2024 |
| Ubuntu | — | Upgrade google-osconfig-agentUpgrade google-guest-agent | Apr 24, 2024 | Mar 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub