CVE-2024-24788

Published: May 8, 2024Modified: Jun 17, 2026Deferred

5.9

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.2 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop.

Related CWEs

Loop with Unreachable Exit Condition ('Infinite Loop')

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

References (14)

http://www.openwall.com/lists/oss-security/2024/05/08/3

Source: security@golang.org

https://go.dev/cl/578375

Source: security@golang.org

https://go.dev/issue/66754

Source: security@golang.org

https://groups.google.com/g/golang-announce/c/wkkO4P9stm0

Source: security@golang.org

https://pkg.go.dev/vuln/GO-2024-2824

Source: security@golang.org

https://security.netapp.com/advisory/ntap-20240605-0002/

Source: security@golang.org

https://security.netapp.com/advisory/ntap-20240614-0001/

Source: security@golang.org

http://www.openwall.com/lists/oss-security/2024/05/08/3

Source: af854a3a-2127-422b-91ae-364da2661108

https://go.dev/cl/578375

Source: af854a3a-2127-422b-91ae-364da2661108

https://go.dev/issue/66754

Source: af854a3a-2127-422b-91ae-364da2661108

https://groups.google.com/g/golang-announce/c/wkkO4P9stm0

Source: af854a3a-2127-422b-91ae-364da2661108

https://pkg.go.dev/vuln/GO-2024-2824

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.netapp.com/advisory/ntap-20240605-0002/

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.netapp.com/advisory/ntap-20240614-0001/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.