AZL-35644
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-35644.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-35644
- Upstream
- Published
- 2024-03-05T23:15:07Z
- Modified
- 2026-04-01T05:13:02.449880Z
- Summary
- CVE-2024-24786 affecting package etcd for versions less than 3.5.12-2
- Details
-
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.
- References