The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade buildahUpgrade containernetworking-pluginsUpgrade criu-libsUpgrade aardvark-dnsUpgrade containers-commonUpgrade toolbox-testsUpgrade cockpit-podmanUpgrade container-selinuxUpgrade podman-remoteUpgrade udicaUpgrade python3-criuUpgrade runcUpgrade libslirp-develUpgrade buildah-testsUpgrade critUpgrade oci-seccomp-bpf-hookUpgrade libslirpUpgrade python3-podmanUpgrade crunUpgrade skopeoUpgrade podmanUpgrade podman-pluginsUpgrade fuse-overlayfsUpgrade slirp4netnsUpgrade criu-develUpgrade toolboxUpgrade skopeo-testsUpgrade criuUpgrade podman-gvproxyUpgrade podman-testsUpgrade podman-dockerUpgrade podman-catatonitUpgrade netavarkUpgrade conmon | May 8, 2024 | Mar 5, 2024 |
| Alpine Linux | — | Upgrade buildah | Aug 22, 2024 | Mar 5, 2024 |
| Amazon Linux Ami 2 | — | Upgrade nerdctl-debuginfoUpgrade docker-debuginfoUpgrade dockerUpgrade cri-toolsUpgrade cri-tools-debuginfoUpgrade nerdctlUpgrade containerd-debuginfoUpgrade containerdUpgrade containerd-stressUpgrade amazon-cloudwatch-agent | May 31, 2024 | Mar 5, 2024 |
| Amazon_linux_2023 | — | Upgrade docker-debugsourceUpgrade docker-debuginfoUpgrade amazon-cloudwatch-agentUpgrade nerdctlUpgrade dockerUpgrade containerdUpgrade containerd-stress-debuginfoUpgrade containerd-debuginfoUpgrade containerd-debugsourceUpgrade containerd-stress | Feb 17, 2025 | Mar 5, 2024 |
| Centos_linux | — | Upgrade rhc-worker-script | Apr 19, 2024 | Mar 5, 2024 |
| Debian | — | No solution existsUpgrade golang-google-protobuf | May 15, 2025 | Mar 5, 2024 |
| F5 Big Ip | — | — | Sep 23, 2024 | Mar 5, 2024 |
| Freebsd | — | Upgrade oauth2-proxy | Oct 22, 2024 | Oct 18, 2024 |
| Gentoo Linux | — | Upgrade app-containers/buildah.Upgrade app-containers/podman. | Jul 9, 2024 | Mar 5, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Aug 22, 2025 |
| Oracle_linux | — | Upgrade olcne-kubevirt-chartUpgrade python3-criuUpgrade podman-dockerUpgrade buildah-testsUpgrade cri-oUpgrade fuse-overlayfsUpgrade olcnectlUpgrade istio-istioctlUpgrade cockpit-podmanUpgrade kubeadmUpgrade podman-gvproxyUpgrade olcne-utilsUpgrade buildahUpgrade olcne-metallb-chartUpgrade olcne-prometheus-chartUpgrade olcne-istio-chartUpgrade container-selinuxUpgrade olcne-grafana-chartUpgrade aardvark-dnsUpgrade critUpgrade olcne-nginxUpgrade podman-remoteUpgrade slirp4netnsUpgrade olcne-calico-chartUpgrade olcne-rook-chartUpgrade runcUpgrade libslirp-develUpgrade skopeo-testsUpgrade kubeletUpgrade criu-libsUpgrade podman-catatonitUpgrade podmanUpgrade oci-seccomp-bpf-hookUpgrade netavarkUpgrade containernetworking-pluginsUpgrade python3-podmanUpgrade olcne-olm-chartUpgrade olcne-gluster-chartUpgrade kubectlUpgrade conmonUpgrade podman-pluginsUpgrade criuUpgrade olcne-multus-chartUpgrade criu-develUpgrade udicaUpgrade podman-testsUpgrade libslirpUpgrade etcdUpgrade istioUpgrade skopeoUpgrade olcne-api-serverUpgrade olcne-agentUpgrade containers-commonUpgrade crunUpgrade olcne-oci-ccm-chartUpgrade cri-tools | Apr 17, 2024 | Mar 5, 2024 |
| Redhat Openshift | — | Upgrade openshiftUpgrade podmanUpgrade cri-toolsUpgrade microshiftUpgrade ose-azure-acr-image-credential-providerUpgrade ose-gcp-gcr-image-credential-providerUpgrade cri-o | Mar 28, 2024 | Mar 5, 2024 |
| Redhat_linux | — | Upgrade criu-debugsourceUpgrade containers-commonUpgrade fuse-overlayfsUpgrade runc-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade podman-remote-debuginfoUpgrade skopeo-debugsourceUpgrade criu-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade criu-libsUpgrade containernetworking-pluginsUpgrade netavarkUpgrade crun-debuginfoUpgrade crun-debugsourceUpgrade libslirp-develUpgrade python3-podmanUpgrade buildahUpgrade buildah-debuginfoUpgrade conmon-debugsourceUpgrade skopeoUpgrade oci-seccomp-bpf-hookUpgrade runc-debuginfoUpgrade criuUpgrade buildah-testsUpgrade buildah-tests-debuginfoUpgrade aardvark-dnsUpgrade conmon-debuginfoUpgrade slirp4netns-debugsourceUpgrade libslirp-debuginfoUpgrade podman-testsUpgrade udicaUpgrade libslirpUpgrade critUpgrade container-selinuxUpgrade slirp4netns-debuginfoUpgrade rhc-worker-scriptUpgrade podman-dockerUpgrade criu-libs-debuginfoUpgrade python3-criuUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-gvproxyUpgrade libslirp-debugsourceUpgrade podman-debugsourceUpgrade toolbox-debugsourceUpgrade podman-plugins-debuginfoUpgrade skopeo-debuginfoUpgrade podman-catatonit-debuginfoUpgrade runcUpgrade podman-catatonitNo solution existsUpgrade buildah-debugsourceUpgrade podman-remoteUpgrade cockpit-podmanUpgrade crunUpgrade containernetworking-plugins-debuginfoUpgrade criu-develUpgrade toolbox-testsUpgrade toolbox-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade podman-debuginfoUpgrade podman-pluginsUpgrade slirp4netnsUpgrade podmanUpgrade skopeo-testsUpgrade containernetworking-plugins-debugsourceUpgrade toolboxUpgrade conmonUpgrade oci-seccomp-bpf-hook-debugsource | Apr 19, 2024 | Mar 5, 2024 |
| Rocky_linux | — | Upgrade skopeo-debuginfoUpgrade netavarkUpgrade skopeo-testsUpgrade podman-debugsourceUpgrade slirp4netnsUpgrade fuse-overlayfs-debugsourceUpgrade runc-debuginfoUpgrade buildah-tests-debuginfoUpgrade libslirp-develUpgrade conmon-debuginfoUpgrade criu-libsUpgrade criu-develUpgrade podman-testsUpgrade podman-plugins-debuginfoUpgrade crun-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-testsUpgrade criu-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade podman-gvproxyUpgrade containernetworking-plugins-debugsourceUpgrade slirp4netns-debugsourceUpgrade libslirpUpgrade conmonUpgrade containers-commonUpgrade containernetworking-plugins-debuginfoUpgrade podman-catatonitUpgrade crunUpgrade runc-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade libslirp-debugsourceUpgrade toolbox-debugsourceUpgrade containernetworking-pluginsUpgrade slirp4netns-debuginfoUpgrade criu-libs-debuginfoUpgrade podman-pluginsUpgrade toolboxUpgrade aardvark-dnsUpgrade podman-remoteUpgrade runcUpgrade podman-remote-debuginfoUpgrade toolbox-testsUpgrade skopeo-debugsourceUpgrade fuse-overlayfsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade criuUpgrade buildahUpgrade python3-criuUpgrade libslirp-debuginfoUpgrade critUpgrade skopeoUpgrade podmanUpgrade conmon-debugsourceUpgrade buildah-debuginfoUpgrade podman-catatonit-debuginfoUpgrade crun-debugsourceUpgrade criu-debugsourceUpgrade toolbox-debuginfoUpgrade podman-debuginfoUpgrade buildah-debugsource | May 13, 2024 | Mar 5, 2024 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.2.3Upgrade Splunk Enterprise to version 9.1.6Upgrade Splunk Enterprise to version 9.3.1 | Jul 30, 2026 | Mar 5, 2024 |
| Suse | — | Upgrade podman-remoteUpgrade kubernetes1.24-proxyUpgrade podmanshUpgrade kubernetes1.24-controller-managerUpgrade kubernetes1.24-kubeletUpgrade kubernetes1.26-apiserverUpgrade kubernetes1.24-apiserverUpgrade kubernetes1.28-kubeletUpgrade kubernetes1.27-client-bash-completionUpgrade docker-rootless-extrasUpgrade rclone-zsh-completionUpgrade velociraptorUpgrade kubernetes1.28-clientUpgrade kubernetes1.26-clientUpgrade kubernetes1.29-client-commonUpgrade dockerUpgrade kubernetes1.25-client-bash-completionUpgrade kubernetes1.26-proxyUpgrade kubernetes1.26-client-fish-completionUpgrade kubernetes1.24-client-commonUpgrade kubernetes1.25-client-fish-completionUpgrade kubernetes1.25-schedulerUpgrade kubernetes1.27-proxyUpgrade system-user-velociraptorUpgrade kubernetes1.25-controller-managerUpgrade kubernetes1.24-client-fish-completionUpgrade docker-fish-completionUpgrade kubernetes1.27-clientUpgrade kubernetes1.26-controller-managerUpgrade kubernetes1.27-schedulerUpgrade kubernetes1.26-kubeletUpgrade kubernetes1.24-clientUpgrade podmanUpgrade kubernetes1.28-client-bash-completionUpgrade kubernetes1.28-kubeadmUpgrade kubernetes1.25-kubeadmUpgrade kubernetes1.28-controller-managerUpgrade kubernetes1.27-kubelet-commonUpgrade docker-bash-completionUpgrade kubernetes1.24-schedulerUpgrade kubernetes1.27-apiserverUpgrade kubernetes1.25-proxyUpgrade velociraptor-clientUpgrade kubernetes1.25-kubelet-commonUpgrade kubernetes1.27-kubeadmUpgrade kubernetes1.28-client-commonUpgrade rcloneUpgrade kubernetes1.26-kubelet-commonUpgrade kubernetes1.24-client-bash-completionUpgrade kubernetes1.24-kubeadmUpgrade kubernetes1.28-kubelet-commonUpgrade docker-zsh-completionUpgrade kubernetes1.28-proxyUpgrade kubernetes1.26-client-commonUpgrade kubernetes1.27-kubeletUpgrade kubernetes1.26-schedulerUpgrade kubernetes1.25-apiserverUpgrade rclone-bash-completionUpgrade podman-dockerUpgrade kubernetes1.28-client-fish-completionUpgrade kubernetes1.29-clientUpgrade kubernetes1.28-apiserverUpgrade kubernetes1.27-controller-managerUpgrade buildahUpgrade kubernetes1.26-client-bash-completionUpgrade kubernetes1.27-client-fish-completionUpgrade kubernetes1.26-kubeadmUpgrade kubernetes1.27-client-commonUpgrade kubernetes1.25-client-commonUpgrade kubernetes1.28-schedulerUpgrade kubernetes1.24-kubelet-commonUpgrade kubernetes1.25-kubeletUpgrade kubernetes1.25-client | Jun 17, 2024 | Mar 5, 2024 |
| Ubuntu | — | Upgrade google-osconfig-agentUpgrade google-guest-agent | Apr 24, 2024 | Mar 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub