The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-aardvark-dnsalma-upgrade-buildahalma-upgrade-buildah-testsalma-upgrade-cockpit-podmanalma-upgrade-conmonalma-upgrade-container-selinuxalma-upgrade-containernetworking-pluginsalma-upgrade-containers-commonalma-upgrade-critalma-upgrade-criualma-upgrade-criu-develalma-upgrade-criu-libsalma-upgrade-crunalma-upgrade-fuse-overlayfsalma-upgrade-libslirpalma-upgrade-libslirp-develalma-upgrade-netavarkalma-upgrade-oci-seccomp-bpf-hookalma-upgrade-podmanalma-upgrade-podman-catatonitalma-upgrade-podman-dockeralma-upgrade-podman-gvproxyalma-upgrade-podman-pluginsalma-upgrade-podman-remotealma-upgrade-podman-testsalma-upgrade-python3-criualma-upgrade-python3-podmanalma-upgrade-runcalma-upgrade-skopeoalma-upgrade-skopeo-testsalma-upgrade-slirp4netnsalma-upgrade-toolboxalma-upgrade-toolbox-testsalma-upgrade-udica | May 8, 2024 | Mar 5, 2024 | |
| Alpine Linux | alpine-linux-upgrade-buildah | Aug 22, 2024 | Mar 5, 2024 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-amazon-cloudwatch-agentamazon-linux-ami-2-upgrade-containerdamazon-linux-ami-2-upgrade-containerd-debuginfoamazon-linux-ami-2-upgrade-containerd-stressamazon-linux-ami-2-upgrade-cri-toolsamazon-linux-ami-2-upgrade-cri-tools-debuginfoamazon-linux-ami-2-upgrade-dockeramazon-linux-ami-2-upgrade-docker-debuginfoamazon-linux-ami-2-upgrade-nerdctlamazon-linux-ami-2-upgrade-nerdctl-debuginfo | May 31, 2024 | Mar 5, 2024 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-amazon-cloudwatch-agentamazon-linux-2023-upgrade-containerdamazon-linux-2023-upgrade-containerd-debuginfoamazon-linux-2023-upgrade-containerd-debugsourceamazon-linux-2023-upgrade-containerd-stressamazon-linux-2023-upgrade-containerd-stress-debuginfoamazon-linux-2023-upgrade-dockeramazon-linux-2023-upgrade-docker-debuginfoamazon-linux-2023-upgrade-docker-debugsourceamazon-linux-2023-upgrade-nerdctl | Feb 17, 2025 | Mar 5, 2024 | |
| Centos_linux | — | centos-upgrade-rhc-worker-script | Apr 19, 2024 | Mar 5, 2024 |
| Debian | no-fix-debian-deb-package | May 15, 2025 | Mar 5, 2024 | |
| Freebsd | freebsd-upgrade-package-oauth2-proxy | Oct 22, 2024 | Oct 18, 2024 | |
| Gentoo Linux | gentoo-linux-upgrade-app-containers-buildahgentoo-linux-upgrade-app-containers-podman | Jul 9, 2024 | Mar 5, 2024 | |
| Nutanix Ahv | nutanix-ahv-upgrade-latest | Jun 5, 2026 | Aug 22, 2025 | |
| Oracle_linux | — | oracle-linux-upgrade-aardvark-dnsoracle-linux-upgrade-buildahoracle-linux-upgrade-buildah-testsoracle-linux-upgrade-cockpit-podmanoracle-linux-upgrade-conmonoracle-linux-upgrade-containernetworking-pluginsoracle-linux-upgrade-containers-commonoracle-linux-upgrade-container-selinuxoracle-linux-upgrade-cri-ooracle-linux-upgrade-critoracle-linux-upgrade-cri-toolsoracle-linux-upgrade-criuoracle-linux-upgrade-criu-develoracle-linux-upgrade-criu-libsoracle-linux-upgrade-crunoracle-linux-upgrade-etcdoracle-linux-upgrade-fuse-overlayfsoracle-linux-upgrade-istiooracle-linux-upgrade-istio-istioctloracle-linux-upgrade-kubeadmoracle-linux-upgrade-kubectloracle-linux-upgrade-kubeletoracle-linux-upgrade-libslirporacle-linux-upgrade-libslirp-develoracle-linux-upgrade-netavarkoracle-linux-upgrade-oci-seccomp-bpf-hookoracle-linux-upgrade-olcne-agentoracle-linux-upgrade-olcne-api-serveroracle-linux-upgrade-olcne-calico-chartoracle-linux-upgrade-olcnectloracle-linux-upgrade-olcne-gluster-chartoracle-linux-upgrade-olcne-grafana-chartoracle-linux-upgrade-olcne-istio-chartoracle-linux-upgrade-olcne-kubevirt-chartoracle-linux-upgrade-olcne-metallb-chartoracle-linux-upgrade-olcne-multus-chartoracle-linux-upgrade-olcne-nginxoracle-linux-upgrade-olcne-oci-ccm-chartoracle-linux-upgrade-olcne-olm-chartoracle-linux-upgrade-olcne-prometheus-chartoracle-linux-upgrade-olcne-rook-chartoracle-linux-upgrade-olcne-utilsoracle-linux-upgrade-podmanoracle-linux-upgrade-podman-catatonitoracle-linux-upgrade-podman-dockeroracle-linux-upgrade-podman-gvproxyoracle-linux-upgrade-podman-pluginsoracle-linux-upgrade-podman-remoteoracle-linux-upgrade-podman-testsoracle-linux-upgrade-python3-criuoracle-linux-upgrade-python3-podmanoracle-linux-upgrade-runcoracle-linux-upgrade-skopeooracle-linux-upgrade-skopeo-testsoracle-linux-upgrade-slirp4netnsoracle-linux-upgrade-udica | Apr 17, 2024 | Mar 5, 2024 |
| Redhat Openshift | linuxrpm-upgrade-cri-olinuxrpm-upgrade-cri-toolslinuxrpm-upgrade-microshiftlinuxrpm-upgrade-openshiftlinuxrpm-upgrade-ose-azure-acr-image-credential-providerlinuxrpm-upgrade-ose-gcp-gcr-image-credential-providerlinuxrpm-upgrade-podman | Mar 28, 2024 | Mar 5, 2024 | |
| Redhat_linux | redhat-upgrade-aardvark-dnsredhat-upgrade-buildahredhat-upgrade-buildah-debuginforedhat-upgrade-buildah-debugsourceredhat-upgrade-buildah-testsredhat-upgrade-buildah-tests-debuginforedhat-upgrade-cockpit-podmanredhat-upgrade-conmonredhat-upgrade-conmon-debuginforedhat-upgrade-conmon-debugsourceredhat-upgrade-container-selinuxredhat-upgrade-containernetworking-pluginsredhat-upgrade-containernetworking-plugins-debuginforedhat-upgrade-containernetworking-plugins-debugsourceredhat-upgrade-containers-commonredhat-upgrade-critredhat-upgrade-criuredhat-upgrade-criu-debuginforedhat-upgrade-criu-debugsourceredhat-upgrade-criu-develredhat-upgrade-criu-libsredhat-upgrade-criu-libs-debuginforedhat-upgrade-crunredhat-upgrade-crun-debuginforedhat-upgrade-crun-debugsourceredhat-upgrade-fuse-overlayfsredhat-upgrade-fuse-overlayfs-debuginforedhat-upgrade-fuse-overlayfs-debugsourceredhat-upgrade-libslirpredhat-upgrade-libslirp-debuginforedhat-upgrade-libslirp-debugsourceredhat-upgrade-libslirp-develredhat-upgrade-netavarkredhat-upgrade-oci-seccomp-bpf-hookredhat-upgrade-oci-seccomp-bpf-hook-debuginforedhat-upgrade-oci-seccomp-bpf-hook-debugsourceredhat-upgrade-podmanredhat-upgrade-podman-catatonitredhat-upgrade-podman-catatonit-debuginforedhat-upgrade-podman-debuginforedhat-upgrade-podman-debugsourceredhat-upgrade-podman-dockerredhat-upgrade-podman-gvproxyredhat-upgrade-podman-gvproxy-debuginforedhat-upgrade-podman-pluginsredhat-upgrade-podman-plugins-debuginforedhat-upgrade-podman-remoteredhat-upgrade-podman-remote-debuginforedhat-upgrade-podman-testsredhat-upgrade-python3-criuredhat-upgrade-python3-podmanredhat-upgrade-rhc-worker-scriptredhat-upgrade-runcredhat-upgrade-runc-debuginforedhat-upgrade-runc-debugsourceredhat-upgrade-skopeoredhat-upgrade-skopeo-debuginforedhat-upgrade-skopeo-debugsourceredhat-upgrade-skopeo-testsredhat-upgrade-slirp4netnsredhat-upgrade-slirp4netns-debuginforedhat-upgrade-slirp4netns-debugsourceredhat-upgrade-toolboxredhat-upgrade-toolbox-debuginforedhat-upgrade-toolbox-debugsourceredhat-upgrade-toolbox-testsredhat-upgrade-udica | Apr 19, 2024 | Mar 5, 2024 | |
| Rocky_linux | rocky-upgrade-aardvark-dnsrocky-upgrade-buildahrocky-upgrade-buildah-debuginforocky-upgrade-buildah-debugsourcerocky-upgrade-buildah-testsrocky-upgrade-buildah-tests-debuginforocky-upgrade-conmonrocky-upgrade-conmon-debuginforocky-upgrade-conmon-debugsourcerocky-upgrade-containernetworking-pluginsrocky-upgrade-containernetworking-plugins-debuginforocky-upgrade-containernetworking-plugins-debugsourcerocky-upgrade-containers-commonrocky-upgrade-critrocky-upgrade-criurocky-upgrade-criu-debuginforocky-upgrade-criu-debugsourcerocky-upgrade-criu-develrocky-upgrade-criu-libsrocky-upgrade-criu-libs-debuginforocky-upgrade-crunrocky-upgrade-crun-debuginforocky-upgrade-crun-debugsourcerocky-upgrade-fuse-overlayfsrocky-upgrade-fuse-overlayfs-debuginforocky-upgrade-fuse-overlayfs-debugsourcerocky-upgrade-libslirprocky-upgrade-libslirp-debuginforocky-upgrade-libslirp-debugsourcerocky-upgrade-libslirp-develrocky-upgrade-netavarkrocky-upgrade-oci-seccomp-bpf-hookrocky-upgrade-oci-seccomp-bpf-hook-debuginforocky-upgrade-oci-seccomp-bpf-hook-debugsourcerocky-upgrade-podmanrocky-upgrade-podman-catatonitrocky-upgrade-podman-catatonit-debuginforocky-upgrade-podman-debuginforocky-upgrade-podman-debugsourcerocky-upgrade-podman-gvproxyrocky-upgrade-podman-gvproxy-debuginforocky-upgrade-podman-pluginsrocky-upgrade-podman-plugins-debuginforocky-upgrade-podman-remoterocky-upgrade-podman-remote-debuginforocky-upgrade-podman-testsrocky-upgrade-python3-criurocky-upgrade-runcrocky-upgrade-runc-debuginforocky-upgrade-runc-debugsourcerocky-upgrade-skopeorocky-upgrade-skopeo-debuginforocky-upgrade-skopeo-debugsourcerocky-upgrade-skopeo-testsrocky-upgrade-slirp4netnsrocky-upgrade-slirp4netns-debuginforocky-upgrade-slirp4netns-debugsourcerocky-upgrade-toolboxrocky-upgrade-toolbox-debuginforocky-upgrade-toolbox-debugsourcerocky-upgrade-toolbox-tests | May 13, 2024 | Mar 5, 2024 | |
| Suse | — | suse-upgrade-buildahsuse-upgrade-dockersuse-upgrade-docker-bash-completionsuse-upgrade-docker-fish-completionsuse-upgrade-docker-rootless-extrassuse-upgrade-docker-zsh-completionsuse-upgrade-kubernetes1-24-apiserversuse-upgrade-kubernetes1-24-clientsuse-upgrade-kubernetes1-24-client-bash-completionsuse-upgrade-kubernetes1-24-client-commonsuse-upgrade-kubernetes1-24-client-fish-completionsuse-upgrade-kubernetes1-24-controller-managersuse-upgrade-kubernetes1-24-kubeadmsuse-upgrade-kubernetes1-24-kubeletsuse-upgrade-kubernetes1-24-kubelet-commonsuse-upgrade-kubernetes1-24-proxysuse-upgrade-kubernetes1-24-schedulersuse-upgrade-kubernetes1-25-apiserversuse-upgrade-kubernetes1-25-clientsuse-upgrade-kubernetes1-25-client-bash-completionsuse-upgrade-kubernetes1-25-client-commonsuse-upgrade-kubernetes1-25-client-fish-completionsuse-upgrade-kubernetes1-25-controller-managersuse-upgrade-kubernetes1-25-kubeadmsuse-upgrade-kubernetes1-25-kubeletsuse-upgrade-kubernetes1-25-kubelet-commonsuse-upgrade-kubernetes1-25-proxysuse-upgrade-kubernetes1-25-schedulersuse-upgrade-kubernetes1-26-apiserversuse-upgrade-kubernetes1-26-clientsuse-upgrade-kubernetes1-26-client-bash-completionsuse-upgrade-kubernetes1-26-client-commonsuse-upgrade-kubernetes1-26-client-fish-completionsuse-upgrade-kubernetes1-26-controller-managersuse-upgrade-kubernetes1-26-kubeadmsuse-upgrade-kubernetes1-26-kubeletsuse-upgrade-kubernetes1-26-kubelet-commonsuse-upgrade-kubernetes1-26-proxysuse-upgrade-kubernetes1-26-schedulersuse-upgrade-kubernetes1-27-apiserversuse-upgrade-kubernetes1-27-clientsuse-upgrade-kubernetes1-27-client-bash-completionsuse-upgrade-kubernetes1-27-client-commonsuse-upgrade-kubernetes1-27-client-fish-completionsuse-upgrade-kubernetes1-27-controller-managersuse-upgrade-kubernetes1-27-kubeadmsuse-upgrade-kubernetes1-27-kubeletsuse-upgrade-kubernetes1-27-kubelet-commonsuse-upgrade-kubernetes1-27-proxysuse-upgrade-kubernetes1-27-schedulersuse-upgrade-kubernetes1-28-apiserversuse-upgrade-kubernetes1-28-clientsuse-upgrade-kubernetes1-28-client-bash-completionsuse-upgrade-kubernetes1-28-client-commonsuse-upgrade-kubernetes1-28-client-fish-completionsuse-upgrade-kubernetes1-28-controller-managersuse-upgrade-kubernetes1-28-kubeadmsuse-upgrade-kubernetes1-28-kubeletsuse-upgrade-kubernetes1-28-kubelet-commonsuse-upgrade-kubernetes1-28-proxysuse-upgrade-kubernetes1-28-schedulersuse-upgrade-kubernetes1-29-clientsuse-upgrade-kubernetes1-29-client-commonsuse-upgrade-podmansuse-upgrade-podman-dockersuse-upgrade-podman-remotesuse-upgrade-podmanshsuse-upgrade-rclonesuse-upgrade-rclone-bash-completionsuse-upgrade-rclone-zsh-completionsuse-upgrade-system-user-velociraptorsuse-upgrade-velociraptorsuse-upgrade-velociraptor-client | Jun 17, 2024 | Mar 5, 2024 |
| Ubuntu | ubuntu-upgrade-google-guest-agentubuntu-upgrade-google-osconfig-agent | Apr 24, 2024 | Mar 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub