CVE-2024-24788 – stdlib
Package
Manager: go
Name: stdlib
Vulnerable Version: >=1.22.0-0 <1.22.3
Severity
Level: Low
CVSS v3.1: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS: 0.00128 pctl0.32963
Details
Malformed DNS message can cause infinite loop in net A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop.
Metadata
Created: 2024-05-07T22:33:51Z
Modified: 2024-05-20T16:03:47Z
Source: https://osv-vulnerabilities
CWE IDs: N/A
Alternative ID: N/A
Finding: F184
Auto approve: 1