The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-gvproxyUpgrade podman-dockerUpgrade libslirpUpgrade toolboxUpgrade podman-testsUpgrade fuse-overlayfsUpgrade netavarkUpgrade podman-catatonitUpgrade podmanUpgrade podman-pluginsUpgrade slirp4netnsUpgrade conmonUpgrade python3-podmanUpgrade criu-develUpgrade crunUpgrade criuUpgrade skopeo-testsUpgrade skopeoUpgrade critUpgrade libslirp-develUpgrade runcUpgrade buildahUpgrade python3-criuUpgrade oci-seccomp-bpf-hookUpgrade udicaUpgrade criu-libsUpgrade aardvark-dnsUpgrade cockpit-podmanUpgrade podman-remoteUpgrade container-selinuxUpgrade toolbox-testsUpgrade containers-commonUpgrade buildah-testsUpgrade containernetworking-plugins | May 8, 2024 | Mar 5, 2024 |
| Alpine Linux | — | Upgrade buildah | Aug 22, 2024 | Mar 5, 2024 |
| Amazon Linux Ami 2 | — | Upgrade cri-toolsUpgrade nerdctl-debuginfoUpgrade dockerUpgrade docker-debuginfoUpgrade cri-tools-debuginfoUpgrade nerdctlUpgrade amazon-cloudwatch-agentUpgrade containerd-debuginfoUpgrade containerd-stressUpgrade containerd | May 31, 2024 | Mar 5, 2024 |
| Amazon_linux_2023 | — | Upgrade amazon-cloudwatch-agentUpgrade docker-debuginfoUpgrade docker-debugsourceUpgrade dockerUpgrade containerd-stressUpgrade containerdUpgrade nerdctlUpgrade containerd-stress-debuginfoUpgrade containerd-debugsourceUpgrade containerd-debuginfo | Feb 17, 2025 | Mar 5, 2024 |
| Centos_linux | — | Upgrade rhc-worker-script | Apr 19, 2024 | Mar 5, 2024 |
| Debian | — | No solution existsUpgrade golang-google-protobuf | May 15, 2025 | Mar 5, 2024 |
| F5 Big Ip | — | — | Sep 23, 2024 | Mar 5, 2024 |
| Freebsd | — | Upgrade oauth2-proxy | Oct 22, 2024 | Oct 18, 2024 |
| Gentoo Linux | — | Upgrade app-containers/buildah.Upgrade app-containers/podman. | Jul 9, 2024 | Mar 5, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Aug 22, 2025 |
| Oracle_linux | — | Upgrade etcdUpgrade olcne-gluster-chartUpgrade criu-develUpgrade libslirpUpgrade olcne-agentUpgrade kubectlUpgrade libslirp-develUpgrade conmonUpgrade olcne-api-serverUpgrade containers-commonUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hookUpgrade python3-podmanUpgrade olcne-oci-ccm-chartUpgrade netavarkUpgrade udicaUpgrade crunUpgrade skopeo-testsUpgrade skopeoUpgrade kubeletUpgrade olcne-olm-chartUpgrade criu-libsUpgrade criuUpgrade podman-catatonitUpgrade cri-toolsUpgrade podmanUpgrade istioUpgrade olcne-multus-chartUpgrade podman-testsUpgrade containernetworking-pluginsUpgrade olcne-metallb-chartUpgrade olcnectlUpgrade fuse-overlayfsUpgrade container-selinuxUpgrade olcne-utilsUpgrade olcne-istio-chartUpgrade aardvark-dnsUpgrade buildahUpgrade kubeadmUpgrade podman-gvproxyUpgrade critUpgrade olcne-prometheus-chartUpgrade cockpit-podmanUpgrade buildah-testsUpgrade python3-criuUpgrade podman-dockerUpgrade olcne-kubevirt-chartUpgrade podman-remoteUpgrade olcne-nginxUpgrade slirp4netnsUpgrade runcUpgrade olcne-rook-chartUpgrade olcne-calico-chartUpgrade istio-istioctlUpgrade olcne-grafana-chartUpgrade cri-o | Apr 17, 2024 | Mar 5, 2024 |
| Redhat Openshift | — | Upgrade cri-oUpgrade ose-gcp-gcr-image-credential-providerUpgrade podmanUpgrade openshiftUpgrade microshiftUpgrade ose-azure-acr-image-credential-providerUpgrade cri-tools | Mar 28, 2024 | Mar 5, 2024 |
| Redhat_linux | — | Upgrade toolbox-debugsourceUpgrade podman-catatonit-debuginfoUpgrade runcUpgrade skopeo-debuginfoUpgrade skopeo-testsUpgrade podman-debuginfoUpgrade libslirp-debugsourceUpgrade podman-catatonitUpgrade buildah-debugsourceUpgrade crunNo solution existsUpgrade podman-gvproxy-debuginfoUpgrade python3-criuUpgrade cockpit-podmanUpgrade toolbox-debuginfoUpgrade toolbox-testsUpgrade libslirpUpgrade conmonUpgrade containernetworking-plugins-debuginfoUpgrade container-selinuxUpgrade podman-remoteUpgrade criu-develUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade rhc-worker-scriptUpgrade udicaUpgrade criu-libs-debuginfoUpgrade slirp4netns-debugsourceUpgrade toolboxUpgrade slirp4netns-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade slirp4netnsUpgrade podmanUpgrade critUpgrade libslirp-debuginfoUpgrade podman-dockerUpgrade podman-debugsourceUpgrade podman-plugins-debuginfoUpgrade podman-pluginsUpgrade podman-gvproxyUpgrade containernetworking-plugins-debugsourceUpgrade podman-testsUpgrade libslirp-develUpgrade skopeoUpgrade oci-seccomp-bpf-hookUpgrade python3-podmanUpgrade fuse-overlayfs-debuginfoUpgrade criu-debugsourceUpgrade aardvark-dnsUpgrade netavarkUpgrade runc-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade crun-debuginfoUpgrade skopeo-debugsourceUpgrade fuse-overlayfsUpgrade crun-debugsourceUpgrade containers-commonUpgrade conmon-debugsourceUpgrade criu-libsUpgrade containernetworking-pluginsUpgrade podman-remote-debuginfoUpgrade criu-debuginfoUpgrade buildah-tests-debuginfoUpgrade conmon-debuginfoUpgrade buildah-testsUpgrade buildah-debuginfoUpgrade buildahUpgrade criuUpgrade runc-debuginfo | Apr 19, 2024 | Mar 5, 2024 |
| Rocky_linux | — | Upgrade podman-remoteUpgrade slirp4netns-debuginfoUpgrade criu-libs-debuginfoUpgrade skopeo-debugsourceUpgrade runcUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade python3-criuUpgrade toolbox-debuginfoUpgrade buildahUpgrade libslirp-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podman-debuginfoUpgrade criuUpgrade libslirp-debugsourceUpgrade podman-pluginsUpgrade toolboxUpgrade criu-debugsourceUpgrade crunUpgrade buildah-debugsourceUpgrade crun-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade toolbox-debugsourceUpgrade containernetworking-pluginsUpgrade toolbox-testsUpgrade buildah-debuginfoUpgrade aardvark-dnsUpgrade skopeoUpgrade critUpgrade podman-remote-debuginfoUpgrade podman-catatonitUpgrade fuse-overlayfsUpgrade podman-gvproxy-debuginfoUpgrade conmon-debugsourceUpgrade podmanUpgrade runc-debugsourceUpgrade criu-develUpgrade podman-plugins-debuginfoUpgrade podman-testsUpgrade containernetworking-plugins-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netnsUpgrade podman-debugsourceUpgrade slirp4netns-debugsourceUpgrade containers-commonUpgrade podman-gvproxyUpgrade skopeo-debuginfoUpgrade netavarkUpgrade libslirpUpgrade conmonUpgrade criu-libsUpgrade crun-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade criu-debuginfoUpgrade libslirp-develUpgrade buildah-tests-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-testsUpgrade skopeo-testsUpgrade conmon-debuginfoUpgrade runc-debuginfoUpgrade fuse-overlayfs-debugsource | May 13, 2024 | Mar 5, 2024 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.1.6Upgrade Splunk Enterprise to version 9.3.1Upgrade Splunk Enterprise to version 9.2.3 | Jul 30, 2026 | Mar 5, 2024 |
| Suse | — | Upgrade kubernetes1.26-clientUpgrade kubernetes1.26-apiserverUpgrade kubernetes1.24-controller-managerUpgrade kubernetes1.24-clientUpgrade kubernetes1.26-proxyUpgrade kubernetes1.28-client-bash-completionUpgrade kubernetes1.24-client-commonUpgrade kubernetes1.25-kubeadmUpgrade podmanUpgrade kubernetes1.28-kubeadmUpgrade kubernetes1.28-kubeletUpgrade kubernetes1.27-clientUpgrade kubernetes1.28-clientUpgrade podman-remoteUpgrade kubernetes1.24-proxyUpgrade kubernetes1.27-schedulerUpgrade docker-fish-completionUpgrade kubernetes1.25-client-bash-completionUpgrade kubernetes1.26-kubeletUpgrade kubernetes1.29-client-commonUpgrade kubernetes1.25-schedulerUpgrade kubernetes1.24-client-fish-completionUpgrade kubernetes1.27-client-bash-completionUpgrade kubernetes1.27-proxyUpgrade kubernetes1.26-client-fish-completionUpgrade system-user-velociraptorUpgrade kubernetes1.25-client-fish-completionUpgrade kubernetes1.26-controller-managerUpgrade rclone-zsh-completionUpgrade kubernetes1.24-kubeletUpgrade kubernetes1.25-controller-managerUpgrade kubernetes1.24-apiserverUpgrade velociraptorUpgrade podmanshUpgrade dockerUpgrade docker-rootless-extrasUpgrade kubernetes1.26-client-commonUpgrade kubernetes1.26-schedulerUpgrade kubernetes1.25-apiserverUpgrade buildahUpgrade kubernetes1.24-kubeadmUpgrade docker-zsh-completionUpgrade kubernetes1.28-proxyUpgrade rcloneUpgrade kubernetes1.28-client-commonUpgrade kubernetes1.27-kubeadmUpgrade kubernetes1.26-kubelet-commonUpgrade docker-bash-completionUpgrade kubernetes1.28-controller-managerUpgrade kubernetes1.24-client-bash-completionUpgrade kubernetes1.29-clientUpgrade kubernetes1.27-controller-managerUpgrade kubernetes1.28-apiserverUpgrade kubernetes1.27-client-fish-completionUpgrade kubernetes1.26-client-bash-completionUpgrade kubernetes1.28-client-fish-completionUpgrade podman-dockerUpgrade kubernetes1.27-kubeletUpgrade rclone-bash-completionUpgrade kubernetes1.26-kubeadmUpgrade kubernetes1.24-kubelet-commonUpgrade kubernetes1.27-client-commonUpgrade kubernetes1.25-client-commonUpgrade kubernetes1.28-schedulerUpgrade kubernetes1.25-kubelet-commonUpgrade velociraptor-clientUpgrade kubernetes1.25-proxyUpgrade kubernetes1.25-kubeletUpgrade kubernetes1.25-clientUpgrade kubernetes1.24-schedulerUpgrade kubernetes1.27-kubelet-commonUpgrade kubernetes1.27-apiserverUpgrade kubernetes1.28-kubelet-common | Jun 17, 2024 | Mar 5, 2024 |
| Ubuntu | — | Upgrade google-guest-agentUpgrade google-osconfig-agent | Apr 24, 2024 | Mar 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub