The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade buildahUpgrade podman-remoteUpgrade libslirp-develUpgrade container-selinuxUpgrade containernetworking-pluginsUpgrade udicaUpgrade criu-libsUpgrade buildah-testsUpgrade toolbox-testsUpgrade critUpgrade runcUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade cockpit-podmanUpgrade aardvark-dnsUpgrade python3-criuUpgrade podman-dockerUpgrade crunUpgrade conmonUpgrade slirp4netnsUpgrade podman-catatonitUpgrade skopeoUpgrade podmanUpgrade fuse-overlayfsUpgrade criu-develUpgrade podman-testsUpgrade toolboxUpgrade criuUpgrade skopeo-testsUpgrade python3-podmanUpgrade netavarkUpgrade libslirpUpgrade podman-pluginsUpgrade podman-gvproxy | May 8, 2024 | Mar 5, 2024 |
| Alpine Linux | — | Upgrade buildah | Aug 22, 2024 | Mar 5, 2024 |
| Amazon Linux Ami 2 | — | Upgrade nerdctl-debuginfoUpgrade dockerUpgrade cri-toolsUpgrade docker-debuginfoUpgrade containerdUpgrade containerd-stressUpgrade containerd-debuginfoUpgrade nerdctlUpgrade cri-tools-debuginfoUpgrade amazon-cloudwatch-agent | May 31, 2024 | Mar 5, 2024 |
| Amazon_linux_2023 | — | Upgrade docker-debuginfoUpgrade amazon-cloudwatch-agentUpgrade docker-debugsourceUpgrade containerd-debugsourceUpgrade dockerUpgrade containerd-stressUpgrade containerdUpgrade containerd-debuginfoUpgrade nerdctlUpgrade containerd-stress-debuginfo | Feb 17, 2025 | Mar 5, 2024 |
| Centos_linux | — | Upgrade rhc-worker-script | Apr 19, 2024 | Mar 5, 2024 |
| Debian | — | Upgrade golang-google-protobufNo solution exists | May 15, 2025 | Mar 5, 2024 |
| F5 Big Ip | — | — | Sep 23, 2024 | Mar 5, 2024 |
| Freebsd | — | Upgrade oauth2-proxy | Oct 22, 2024 | Oct 18, 2024 |
| Gentoo Linux | — | Upgrade app-containers/buildah.Upgrade app-containers/podman. | Jul 9, 2024 | Mar 5, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Aug 22, 2025 |
| Oracle_linux | — | Upgrade olcne-api-serverUpgrade crunUpgrade skopeoUpgrade olcne-olm-chartUpgrade podman-testsUpgrade containernetworking-pluginsUpgrade criuUpgrade containers-commonUpgrade olcne-agentUpgrade libslirp-develUpgrade python3-podmanUpgrade netavarkUpgrade oci-seccomp-bpf-hookUpgrade kubeletUpgrade skopeo-testsUpgrade criu-develUpgrade istioUpgrade olcne-multus-chartUpgrade udicaUpgrade etcdUpgrade libslirpUpgrade podman-catatonitUpgrade cri-toolsUpgrade podmanUpgrade olcne-oci-ccm-chartUpgrade criu-libsUpgrade kubectlUpgrade conmonUpgrade podman-pluginsUpgrade olcne-gluster-chartUpgrade cockpit-podmanUpgrade container-selinuxUpgrade python3-criuUpgrade olcnectlUpgrade fuse-overlayfsUpgrade kubeadmUpgrade podman-gvproxyUpgrade olcne-kubevirt-chartUpgrade olcne-calico-chartUpgrade slirp4netnsUpgrade runcUpgrade olcne-metallb-chartUpgrade olcne-utilsUpgrade buildahUpgrade olcne-prometheus-chartUpgrade cri-oUpgrade critUpgrade aardvark-dnsUpgrade podman-remoteUpgrade olcne-nginxUpgrade olcne-grafana-chartUpgrade istio-istioctlUpgrade olcne-istio-chartUpgrade olcne-rook-chartUpgrade podman-dockerUpgrade buildah-tests | Apr 17, 2024 | Mar 5, 2024 |
| Redhat Openshift | — | Upgrade cri-oUpgrade ose-gcp-gcr-image-credential-providerUpgrade ose-azure-acr-image-credential-providerUpgrade podmanUpgrade microshiftUpgrade openshiftUpgrade cri-tools | Mar 28, 2024 | Mar 5, 2024 |
| Redhat_linux | — | Upgrade libslirp-debugsourceUpgrade libslirp-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-develUpgrade cockpit-podmanNo solution existsUpgrade podman-remoteUpgrade criu-libs-debuginfoUpgrade python3-criuUpgrade containernetworking-plugins-debugsourceUpgrade podman-gvproxyUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirpUpgrade toolbox-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podmanUpgrade crunUpgrade rhc-worker-scriptUpgrade podman-pluginsUpgrade podman-dockerUpgrade buildah-debugsourceUpgrade container-selinuxUpgrade skopeo-testsUpgrade critUpgrade toolbox-debugsourceUpgrade toolboxUpgrade podman-plugins-debuginfoUpgrade udicaUpgrade podman-testsUpgrade slirp4netns-debugsourceUpgrade conmonUpgrade podman-debugsourceUpgrade slirp4netnsUpgrade runcUpgrade toolbox-testsUpgrade podman-catatonitUpgrade skopeo-debuginfoUpgrade podman-catatonit-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netns-debuginfoUpgrade podman-debuginfoUpgrade crun-debugsourceUpgrade containernetworking-pluginsUpgrade buildah-tests-debuginfoUpgrade buildah-debuginfoUpgrade libslirp-develUpgrade criu-libsUpgrade skopeoUpgrade podman-remote-debuginfoUpgrade criu-debuginfoUpgrade buildah-testsUpgrade criuUpgrade python3-podmanUpgrade oci-seccomp-bpf-hookUpgrade crun-debuginfoUpgrade buildahUpgrade containers-commonUpgrade fuse-overlayfs-debuginfoUpgrade runc-debuginfoUpgrade criu-debugsourceUpgrade conmon-debugsourceUpgrade runc-debugsourceUpgrade skopeo-debugsourceUpgrade fuse-overlayfsUpgrade netavarkUpgrade conmon-debuginfoUpgrade aardvark-dnsUpgrade fuse-overlayfs-debugsource | Apr 19, 2024 | Mar 5, 2024 |
| Rocky_linux | — | Upgrade conmonUpgrade podman-gvproxyUpgrade netavarkUpgrade podman-testsUpgrade criu-libsUpgrade crun-debuginfoUpgrade criu-develUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade conmon-debuginfoUpgrade runc-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-debugsourceUpgrade skopeo-debuginfoUpgrade skopeo-testsUpgrade containers-commonUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade criu-debuginfoUpgrade buildah-tests-debuginfoUpgrade slirp4netnsUpgrade containernetworking-plugins-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade libslirpUpgrade slirp4netns-debugsourceUpgrade buildah-testsUpgrade fuse-overlayfs-debugsourceUpgrade aardvark-dnsUpgrade buildah-debugsourceUpgrade slirp4netns-debuginfoUpgrade toolbox-testsUpgrade podmanUpgrade buildah-debuginfoUpgrade conmon-debugsourceUpgrade runcUpgrade toolboxUpgrade podman-remoteUpgrade podman-pluginsUpgrade libslirp-debugsourceUpgrade crunUpgrade toolbox-debugsourceUpgrade criu-libs-debuginfoUpgrade containernetworking-pluginsUpgrade skopeoUpgrade critUpgrade podman-catatonitUpgrade runc-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade python3-criuUpgrade criuUpgrade buildahUpgrade podman-debuginfoUpgrade podman-catatonit-debuginfoUpgrade libslirp-debuginfoUpgrade crun-debugsourceUpgrade criu-debugsourceUpgrade toolbox-debuginfoUpgrade fuse-overlayfsUpgrade skopeo-debugsourceUpgrade podman-remote-debuginfo | May 13, 2024 | Mar 5, 2024 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.2.3Upgrade Splunk Enterprise to version 9.1.6Upgrade Splunk Enterprise to version 9.3.1 | Jul 30, 2026 | Mar 5, 2024 |
| Suse | — | Upgrade kubernetes1.28-client-fish-completionUpgrade podman-dockerUpgrade kubernetes1.27-kubeletUpgrade rclone-bash-completionUpgrade kubernetes1.28-schedulerUpgrade buildahUpgrade kubernetes1.25-apiserverUpgrade kubernetes1.26-schedulerUpgrade kubernetes1.27-client-fish-completionUpgrade kubernetes1.26-kubeadmUpgrade kubernetes1.26-client-commonUpgrade kubernetes1.27-client-commonUpgrade kubernetes1.28-client-commonUpgrade kubernetes1.24-kubelet-commonUpgrade kubernetes1.26-kubelet-commonUpgrade kubernetes1.27-kubeadmUpgrade kubernetes1.25-client-commonUpgrade kubernetes1.24-client-bash-completionUpgrade kubernetes1.24-kubeadmUpgrade velociraptor-clientUpgrade kubernetes1.28-kubelet-commonUpgrade kubernetes1.25-kubelet-commonUpgrade kubernetes1.25-proxyUpgrade kubernetes1.27-kubelet-commonUpgrade kubernetes1.28-proxyUpgrade kubernetes1.29-clientUpgrade kubernetes1.26-client-bash-completionUpgrade kubernetes1.27-controller-managerUpgrade kubernetes1.24-schedulerUpgrade kubernetes1.28-controller-managerUpgrade kubernetes1.25-kubeletUpgrade rcloneUpgrade docker-bash-completionUpgrade kubernetes1.28-apiserverUpgrade kubernetes1.25-clientUpgrade kubernetes1.27-apiserverUpgrade docker-zsh-completionUpgrade kubernetes1.26-proxyUpgrade velociraptorUpgrade podmanUpgrade kubernetes1.24-clientUpgrade kubernetes1.28-client-bash-completionUpgrade kubernetes1.25-client-fish-completionUpgrade rclone-zsh-completionUpgrade kubernetes1.29-client-commonUpgrade kubernetes1.28-kubeletUpgrade kubernetes1.28-clientUpgrade kubernetes1.26-controller-managerUpgrade kubernetes1.26-clientUpgrade kubernetes1.25-controller-managerUpgrade kubernetes1.28-kubeadmUpgrade kubernetes1.25-kubeadmUpgrade docker-rootless-extrasUpgrade dockerUpgrade kubernetes1.26-kubeletUpgrade kubernetes1.25-client-bash-completionUpgrade kubernetes1.27-schedulerUpgrade kubernetes1.24-proxyUpgrade kubernetes1.24-apiserverUpgrade podman-remoteUpgrade kubernetes1.27-clientUpgrade kubernetes1.26-apiserverUpgrade kubernetes1.24-client-commonUpgrade system-user-velociraptorUpgrade kubernetes1.25-schedulerUpgrade kubernetes1.26-client-fish-completionUpgrade kubernetes1.27-proxyUpgrade kubernetes1.24-client-fish-completionUpgrade docker-fish-completionUpgrade podmanshUpgrade kubernetes1.27-client-bash-completionUpgrade kubernetes1.24-kubeletUpgrade kubernetes1.24-controller-manager | Jun 17, 2024 | Mar 5, 2024 |
| Ubuntu | — | Upgrade google-guest-agentUpgrade google-osconfig-agent | Apr 24, 2024 | Mar 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub