TI-2024-22607 CVE-2024-34158 · GHSA-j7vj-rw65-4v26
Stack exhaustion in Parse in go/build/constraint
Priority MEDIUM 41
Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.
RHSA-2024:8229
OpenShift Container Platform 4.17.2 bug fix and security update
Released 2024-10-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.17 openshift4/aws-kms-encryption-provider-rhel9, openshift4/azure-kms-encryption-provider-rhel9, openshift4/cloud-network-config-controller-rhel9 +47
Fixes 5 records
TI-2024-22606 CVE-2024-34156 · GHSA-crqm-pwhx-j97f
Stack exhaustion in Decoder.Decode in encoding/gob
Priority MEDIUM 41
Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion.
TI-2024-18756 CVE-2024-28180 · GHSA-c5q2-7r4c-mv6g
Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)
Priority LOW 26
Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards.
TI-2024-31566 CVE-2024-47211 · GHSA-8h22-6qwx-q4w9
In OpenStack Ironic before 21.4.4, 22.x and 23.x before 23.0.3, 23.x and 24.x before…
Priority LOW 25
In OpenStack Ironic before 21.4.4, 22.x and 23.x before 23.0.3, 23.x and 24.x before 24.1.3, and 25.x and 26.x before 26.1.0, there is a lack of checksum validation of supplied image_source URLs when configured to conver…
TI-2024-22605 CVE-2024-34155 · GHSA-8xfx-rj4p-23jm
Stack exhaustion in all Parse functions in go/parser
Priority LOW 22
Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion.