The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade oci-seccomp-bpf-hookUpgrade buildah-testsUpgrade critUpgrade container-selinuxUpgrade podman-remoteUpgrade containers-commonUpgrade python3-criuUpgrade aardvark-dnsUpgrade toolbox-testsUpgrade buildahUpgrade libslirp-develUpgrade criu-libsUpgrade containernetworking-pluginsUpgrade runcUpgrade cockpit-podmanUpgrade udicaUpgrade slirp4netnsUpgrade podman-catatonitUpgrade fuse-overlayfsUpgrade skopeo-testsUpgrade crunUpgrade criu-develUpgrade netavarkUpgrade podman-gvproxyUpgrade podman-testsUpgrade libslirpUpgrade toolboxUpgrade podman-dockerUpgrade podmanUpgrade python3-podmanUpgrade skopeoUpgrade podman-pluginsUpgrade criuUpgrade conmon | May 8, 2024 | Mar 5, 2024 |
| Alpine Linux | — | Upgrade buildah | Aug 22, 2024 | Mar 5, 2024 |
| Amazon Linux Ami 2 | — | Upgrade containerdUpgrade cri-tools-debuginfoUpgrade containerd-debuginfoUpgrade containerd-stressUpgrade amazon-cloudwatch-agentUpgrade nerdctlUpgrade docker-debuginfoUpgrade cri-toolsUpgrade nerdctl-debuginfoUpgrade docker | May 31, 2024 | Mar 5, 2024 |
| Amazon_linux_2023 | — | Upgrade docker-debuginfoUpgrade amazon-cloudwatch-agentUpgrade docker-debugsourceUpgrade containerd-debugsourceUpgrade containerdUpgrade containerd-stressUpgrade dockerUpgrade containerd-stress-debuginfoUpgrade nerdctlUpgrade containerd-debuginfo | Feb 17, 2025 | Mar 5, 2024 |
| Centos_linux | — | Upgrade rhc-worker-script | Apr 19, 2024 | Mar 5, 2024 |
| Debian | — | Upgrade golang-google-protobuf | May 15, 2025 | Mar 5, 2024 |
| F5 Big Ip | — | — | Sep 23, 2024 | Mar 5, 2024 |
| Freebsd | — | Upgrade oauth2-proxy | Oct 22, 2024 | Oct 18, 2024 |
| Gentoo Linux | — | Upgrade app-containers/buildah.Upgrade app-containers/podman. | Jul 9, 2024 | Mar 5, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Aug 22, 2025 |
| Oracle_linux | — | Upgrade podman-gvproxyUpgrade kubeadmUpgrade olcne-kubevirt-chartUpgrade olcne-grafana-chartUpgrade cri-oUpgrade istio-istioctlUpgrade container-selinuxUpgrade olcne-rook-chartUpgrade buildah-testsUpgrade olcne-calico-chartUpgrade podman-dockerUpgrade runcUpgrade python3-criuUpgrade fuse-overlayfsUpgrade olcne-metallb-chartUpgrade olcne-prometheus-chartUpgrade olcne-utilsUpgrade cockpit-podmanUpgrade buildahUpgrade critUpgrade olcne-istio-chartUpgrade olcnectlUpgrade olcne-nginxUpgrade slirp4netnsUpgrade podman-remoteUpgrade aardvark-dnsUpgrade olcne-multus-chartUpgrade libslirp-develUpgrade podman-testsUpgrade criu-develUpgrade netavarkUpgrade skopeo-testsUpgrade kubeletUpgrade cri-toolsUpgrade podman-catatonitUpgrade olcne-oci-ccm-chartUpgrade podmanUpgrade conmonUpgrade olcne-gluster-chartUpgrade etcdUpgrade libslirpUpgrade python3-podmanUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-pluginsUpgrade istioUpgrade udicaUpgrade criu-libsUpgrade criuUpgrade skopeoUpgrade olcne-olm-chartUpgrade crunUpgrade olcne-api-serverUpgrade olcne-agentUpgrade containers-commonUpgrade podman-pluginsUpgrade kubectl | Apr 17, 2024 | Mar 5, 2024 |
| Redhat Openshift | — | Upgrade podmanUpgrade openshiftUpgrade microshiftUpgrade cri-toolsUpgrade ose-azure-acr-image-credential-providerUpgrade ose-gcp-gcr-image-credential-providerUpgrade cri-o | Mar 28, 2024 | Mar 5, 2024 |
| Redhat_linux | — | Upgrade rhc-worker-scriptUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade skopeo-testsUpgrade libslirp-debuginfoUpgrade libslirp-debugsourceUpgrade conmonNo solution existsUpgrade critUpgrade skopeo-debuginfoUpgrade slirp4netns-debuginfoUpgrade slirp4netns-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade container-selinuxUpgrade podman-debugsourceUpgrade buildah-debugsourceUpgrade podmanUpgrade slirp4netnsUpgrade podman-pluginsUpgrade podman-debuginfoUpgrade podman-dockerUpgrade podman-gvproxyUpgrade podman-plugins-debuginfoUpgrade runcUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade toolboxUpgrade toolbox-debugsourceUpgrade udicaUpgrade podman-catatonitUpgrade python3-criuUpgrade podman-remoteUpgrade podman-gvproxy-debuginfoUpgrade criu-develUpgrade libslirpUpgrade toolbox-testsUpgrade containernetworking-plugins-debuginfoUpgrade toolbox-debuginfoUpgrade cockpit-podmanUpgrade crunUpgrade podman-testsUpgrade criu-libs-debuginfoUpgrade runc-debugsourceUpgrade netavarkUpgrade crun-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade skopeo-debugsourceUpgrade criu-debugsourceUpgrade conmon-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade containers-commonUpgrade containernetworking-pluginsUpgrade libslirp-develUpgrade crun-debugsourceUpgrade criu-debuginfoUpgrade fuse-overlayfsUpgrade criuUpgrade oci-seccomp-bpf-hookUpgrade runc-debuginfoUpgrade buildahUpgrade conmon-debuginfoUpgrade buildah-testsUpgrade buildah-debuginfoUpgrade python3-podmanUpgrade aardvark-dnsUpgrade podman-remote-debuginfoUpgrade skopeoUpgrade criu-libsUpgrade buildah-tests-debuginfo | Apr 19, 2024 | Mar 5, 2024 |
| Rocky_linux | — | Upgrade criuUpgrade toolbox-debuginfoUpgrade podman-debuginfoUpgrade criu-debugsourceUpgrade podman-pluginsUpgrade crun-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade podman-catatonitUpgrade podman-gvproxy-debuginfoUpgrade critUpgrade runc-debugsourceUpgrade slirp4netns-debuginfoUpgrade toolbox-debugsourceUpgrade buildah-debugsourceUpgrade skopeoUpgrade criu-libs-debuginfoUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade python3-criuUpgrade buildahUpgrade buildah-debuginfoUpgrade conmon-debugsourceUpgrade podmanUpgrade crunUpgrade podman-remote-debuginfoUpgrade skopeo-debugsourceUpgrade fuse-overlayfsUpgrade runcUpgrade containernetworking-pluginsUpgrade toolbox-testsUpgrade podman-remoteUpgrade toolboxUpgrade aardvark-dnsUpgrade libslirp-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podman-gvproxyUpgrade crun-debuginfoUpgrade slirp4netnsUpgrade slirp4netns-debugsourceUpgrade skopeo-testsUpgrade conmon-debuginfoUpgrade conmonUpgrade buildah-testsUpgrade criu-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade runc-debuginfoUpgrade libslirp-develUpgrade buildah-tests-debuginfoUpgrade netavarkUpgrade libslirpUpgrade skopeo-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade podman-testsUpgrade containernetworking-plugins-debugsourceUpgrade containers-commonUpgrade podman-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-libsUpgrade criu-develUpgrade podman-plugins-debuginfoUpgrade fuse-overlayfs-debugsource | May 13, 2024 | Mar 5, 2024 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.2.3Upgrade Splunk Enterprise to version 9.3.1Upgrade Splunk Enterprise to version 9.1.6 | Jul 30, 2026 | Mar 5, 2024 |
| Suse | — | Upgrade kubernetes1.25-schedulerUpgrade kubernetes1.24-client-fish-completionUpgrade docker-fish-completionUpgrade kubernetes1.24-controller-managerUpgrade rclone-zsh-completionUpgrade velociraptorUpgrade kubernetes1.29-client-commonUpgrade kubernetes1.25-client-fish-completionUpgrade kubernetes1.26-clientUpgrade kubernetes1.28-clientUpgrade kubernetes1.28-kubeletUpgrade kubernetes1.26-controller-managerUpgrade kubernetes1.24-client-commonUpgrade kubernetes1.25-controller-managerUpgrade kubernetes1.27-proxyUpgrade kubernetes1.27-client-bash-completionUpgrade podman-remoteUpgrade kubernetes1.25-kubeadmUpgrade kubernetes1.24-proxyUpgrade kubernetes1.27-clientUpgrade kubernetes1.24-apiserverUpgrade podmanshUpgrade kubernetes1.27-schedulerUpgrade kubernetes1.25-client-bash-completionUpgrade kubernetes1.26-apiserverUpgrade docker-rootless-extrasUpgrade system-user-velociraptorUpgrade kubernetes1.26-kubeletUpgrade kubernetes1.26-proxyUpgrade kubernetes1.26-client-fish-completionUpgrade kubernetes1.24-kubeletUpgrade dockerUpgrade kubernetes1.28-client-bash-completionUpgrade podmanUpgrade kubernetes1.24-clientUpgrade kubernetes1.28-kubeadmUpgrade kubernetes1.27-kubelet-commonUpgrade kubernetes1.27-apiserverUpgrade kubernetes1.26-kubeadmUpgrade kubernetes1.27-client-fish-completionUpgrade kubernetes1.24-client-bash-completionUpgrade docker-bash-completionUpgrade kubernetes1.29-clientUpgrade kubernetes1.26-client-bash-completionUpgrade kubernetes1.28-apiserverUpgrade kubernetes1.25-client-commonUpgrade kubernetes1.27-controller-managerUpgrade kubernetes1.24-kubelet-commonUpgrade kubernetes1.26-kubelet-commonUpgrade rcloneUpgrade kubernetes1.28-schedulerUpgrade kubernetes1.28-client-commonUpgrade kubernetes1.27-kubeadmUpgrade kubernetes1.25-apiserverUpgrade kubernetes1.26-schedulerUpgrade rclone-bash-completionUpgrade buildahUpgrade podman-dockerUpgrade kubernetes1.28-client-fish-completionUpgrade kubernetes1.27-kubeletUpgrade kubernetes1.28-controller-managerUpgrade kubernetes1.26-client-commonUpgrade docker-zsh-completionUpgrade kubernetes1.28-kubelet-commonUpgrade kubernetes1.24-kubeadmUpgrade kubernetes1.28-proxyUpgrade kubernetes1.25-proxyUpgrade velociraptor-clientUpgrade kubernetes1.25-kubeletUpgrade kubernetes1.25-kubelet-commonUpgrade kubernetes1.25-clientUpgrade kubernetes1.24-schedulerUpgrade kubernetes1.27-client-common | Jun 17, 2024 | Mar 5, 2024 |
| Ubuntu | — | Upgrade google-osconfig-agentUpgrade google-guest-agent | Apr 24, 2024 | Mar 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub