AZL-35661

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-35661.json

JSON Data

https://api.test.osv.dev/v1/vulns/AZL-35661

Upstream

CVE-2024-24786

Published

2024-03-05T23:15:07Z

Modified

2026-04-01T05:12:12.575908Z

Summary

CVE-2024-24786 affecting package kube-vip-cloud-provider for versions less than 0.0.10-1

Details

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.

References

https://nvd.nist.gov/vuln/detail/CVE-2024-24786

Affected packages

Azure Linux:3 / kube-vip-cloud-provider

Package

Name: kube-vip-cloud-provider
Purl: pkg:rpm/azure-linux/kube-vip-cloud-provider

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.0.10-1

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-35661.json"