Every CVE Search/ Get API key

CVE-2024-24786

Infinite loop in JSON unmarshaling in google.golang.org/protobuf

7.5 HighFix available

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

1.26%Up 1.2 points since Mar 6, 2024
90%50%10%1%

What each source reports

CVE List Score used 7.5

Infinite loop in JSON unmarshaling in google.golang.org/protobuf

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.

Record
CVE-2024-24786
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
EUVDEUVD-2024-0879 7.5

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.

Record
EUVD-2024-0879
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-8r3f-844c-mc37 6.6

Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSON

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.

Record
GHSA-8r3f-844c-mc37
CVSS 4.0
6.6 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-835
Updated
2026-11-02
NVD 7.5

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.

Record
CVE-2024-24786
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALPINE-CVE-2024-24786 7.5

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.

Record
ALPINE-CVE-2024-24786
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSVDEBIAN-CVE-2024-24786 7.5

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.

Record
DEBIAN-CVE-2024-24786
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 48 moreShow less
OSVGHSA-8r3f-844c-mc37 6.6

Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSON

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.

Record
GHSA-8r3f-844c-mc37
CVSS 4.0
6.6 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-835
Updated
2026-11-02
OSVOESA-2024-1380 7.5

cri-tools security update

CLI and validation tools for Container Runtime Interface

Security Fix(es):

A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.(CVE-2022-41723)

A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a new request while the existing one is still executing. With the fix applied, HTTP/2 servers now bound the number of simultaneously executing handler goroutines to the stream concurrency limit (MaxConcurrentStreams). New requests arriving when at the limit (which can only happen after the client has reset an existing, in-flight request) will be queued until a handler exits. If the request queue grows too large, the server will terminate the connection. This issue is also fixed in golang.org/x/net/http2 for users manually configuring HTTP/2. The default stream concurrency limit is 250 streams (requests) per HTTP/2 connection. This value may be adjusted using the golang.org/x/net/http2 package; see the Server.MaxConcurrentStreams setting and the ConfigureServer function.(CVE-2023-39325)

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.(CVE-2024-24786)

Record
OESA-2024-1380
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2024-1381 7.5

cri-tools security update

CLI and validation tools for Container Runtime Interface

Security Fix(es):

A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.(CVE-2022-41723)

A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a new request while the existing one is still executing. With the fix applied, HTTP/2 servers now bound the number of simultaneously executing handler goroutines to the stream concurrency limit (MaxConcurrentStreams). New requests arriving when at the limit (which can only happen after the client has reset an existing, in-flight request) will be queued until a handler exits. If the request queue grows too large, the server will terminate the connection. This issue is also fixed in golang.org/x/net/http2 for users manually configuring HTTP/2. The default stream concurrency limit is 250 streams (requests) per HTTP/2 connection. This value may be adjusted using the golang.org/x/net/http2 package; see the Server.MaxConcurrentStreams setting and the ConfigureServer function.(CVE-2023-39325)

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.(CVE-2024-24786)

Record
OESA-2024-1381
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2024-1382 7.5

cri-tools security update

CLI and validation tools for Container Runtime Interface

Security Fix(es):

A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.(CVE-2022-41723)

A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a new request while the existing one is still executing. With the fix applied, HTTP/2 servers now bound the number of simultaneously executing handler goroutines to the stream concurrency limit (MaxConcurrentStreams). New requests arriving when at the limit (which can only happen after the client has reset an existing, in-flight request) will be queued until a handler exits. If the request queue grows too large, the server will terminate the connection. This issue is also fixed in golang.org/x/net/http2 for users manually configuring HTTP/2. The default stream concurrency limit is 250 streams (requests) per HTTP/2 connection. This value may be adjusted using the golang.org/x/net/http2 package; see the Server.MaxConcurrentStreams setting and the ConfigureServer function.(CVE-2023-39325)

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.(CVE-2024-24786)

Record
OESA-2024-1382
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-1689 7.5

cri-o security update

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface.

Security Fix(es):

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.(CVE-2024-24786)

Record
OESA-2025-1689
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:0043 5.9

Red Hat Security Advisory: Red Hat build of MicroShift 4.16.0 security update

Record
RHSA-2024:0043
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:0045 8.3

Red Hat Security Advisory: OpenShift Container Platform 4.16.0 security update

Record
RHSA-2024:0045
CVSS 3.1
8.3 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:1456 5.9

Red Hat Security Advisory: OpenShift Container Platform 4.13.38 packages and security update

Record
RHSA-2024:1456
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:1461 5.9

Red Hat Security Advisory: OpenShift Container Platform 4.14.18 packages and security update

Record
RHSA-2024:1461
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:1563 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.15.6 packages and security update

Record
RHSA-2024:1563
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:1574 7.5

Red Hat Security Advisory: OpenShift Container Platform 4.12.54 packages and security update

Record
RHSA-2024:1574
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:1874 5.9

Red Hat Security Advisory: rhc-worker-script security and enhancement update

Record
RHSA-2024:1874
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:2548 8.6

Red Hat Security Advisory: podman security and bug fix update

Record
RHSA-2024:2548
CVSS 3.1
8.6 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:2549 5.9

Red Hat Security Advisory: skopeo security and bug fix update

Record
RHSA-2024:2549
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:2550 5.9

Red Hat Security Advisory: buildah bug fix update

Record
RHSA-2024:2550
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:3254 8.6

Red Hat Security Advisory: container-tools:rhel8 security update

Record
RHSA-2024:3254
CVSS 3.1
8.6 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:3634 8.8

Red Hat Security Advisory: Red Hat Product OCP Tools 4.14 OpenShift Jenkins security update

Record
RHSA-2024:3634
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:3635 8.8

Red Hat Security Advisory: Red Hat Product OCP Tools 4.12 Openshift Jenkins security update

Record
RHSA-2024:3635
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:3636 8.8

Red Hat Security Advisory: Red Hat Product OCP Tools 4.13 OpenShift Jenkins security update

Record
RHSA-2024:3636
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:3715 5.9

Red Hat Security Advisory: OpenShift Container Platform 4.12.59 packages and security update

Record
RHSA-2024:3715
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:4246 5.9

Red Hat Security Advisory: container-tools security update

Record
RHSA-2024:4246
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:4597 8.8

Red Hat Security Advisory: Red Hat Product OCP Tools 4.15 OpenShift Jenkins security update

Record
RHSA-2024:4597
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:72489 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:72489
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:72493 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:72493
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:72496 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:72496
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:72570 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:72570
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:76430 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:76430
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:76448 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:76448
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:76677 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:76677
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:76876 5.9

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:76876
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:77895 5.9

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:77895
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:80632 5.9

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:80632
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:80634 5.9

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:80634
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:80637 5.9

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:80637
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:80643 5.9

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:80643
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:80646 5.9

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:80646
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:80647 5.9

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:80647
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:80649 5.9

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:80649
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:80650 5.9

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:80650
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:80651 5.9

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:80651
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:80652 5.9

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:80652
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:80653 5.9

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:80653
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:80654 5.9

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:80654
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:80656 5.9

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:80656
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:80657 5.9

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:80657
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:80658 5.9

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:80658
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:80659 5.9

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:80659
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:80660 5.9

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:80660
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
google.golang.org/protobuf
Go
 before 1.33.0
1.33.0
google.golang.org/protobuf/encoding/protojson
Go
 before 1.33.0
1.33.0
google.golang.org/protobuf/internal/encoding/json
Go
 before 1.33.0
1.33.0
buildah
Alpine:v3.20
 before 1.35.4-r0
1.35.4-r0
buildah
Alpine:v3.21
 before 1.35.4-r0
1.35.4-r0
buildah
Alpine:v3.22
 before 1.35.4-r0
1.35.4-r0
buildah
Alpine:v3.23
 before 1.35.4-r0
1.35.4-r0
buildah
Alpine:v3.24
 before 1.35.4-r0
1.35.4-r0
podman
AlmaLinux:9
From an advisory covering 2 CVEs
 before 4:4.9.4-3.el9_4
4:4.9.4-3.el9_4
podman-docker
AlmaLinux:9
From an advisory covering 2 CVEs
 before 4:4.9.4-3.el9_4
4:4.9.4-3.el9_4
Show 290 moreShow less
Affected packages
PackageAffectedFixed
podman-plugins
AlmaLinux:9
From an advisory covering 2 CVEs
 before 4:4.9.4-3.el9_4
4:4.9.4-3.el9_4
podman-remote
AlmaLinux:9
From an advisory covering 2 CVEs
 before 4:4.9.4-3.el9_4
4:4.9.4-3.el9_4
podman-tests
AlmaLinux:9
From an advisory covering 2 CVEs
 before 4:4.9.4-3.el9_4
4:4.9.4-3.el9_4
skopeo
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2:1.14.3-2.el9_4
2:1.14.3-2.el9_4
skopeo-tests
AlmaLinux:9
From an advisory covering 2 CVEs
 before 2:1.14.3-2.el9_4
2:1.14.3-2.el9_4
buildah
AlmaLinux:9
 before 2:1.33.7-1.el9_4
2:1.33.7-1.el9_4
buildah-tests
AlmaLinux:9
 before 2:1.33.7-1.el9_4
2:1.33.7-1.el9_4
aardvark-dns
AlmaLinux:8
From an advisory covering 5 CVEs
 before 2:1.10.0-1.module_el8.10.0+3792+03eaed9c
2:1.10.0-1.module_el8.10.0+3792+03eaed9c
buildah
AlmaLinux:8
From an advisory covering 5 CVEs
 before 2:1.33.7-1.module_el8.10.0+3845+87b84552
2:1.33.7-1.module_el8.10.0+3845+87b84552
buildah-tests
AlmaLinux:8
From an advisory covering 5 CVEs
 before 2:1.33.7-1.module_el8.10.0+3845+87b84552
2:1.33.7-1.module_el8.10.0+3845+87b84552
cockpit-podman
AlmaLinux:8
From an advisory covering 5 CVEs
 before 84.1-1.module_el8.10.0+3792+03eaed9c
84.1-1.module_el8.10.0+3792+03eaed9c
conmon
AlmaLinux:8
From an advisory covering 5 CVEs
 before 3:2.1.10-1.module_el8.10.0+3845+87b84552
3:2.1.10-1.module_el8.10.0+3845+87b84552
container-selinux
AlmaLinux:8
From an advisory covering 5 CVEs
 before 2:2.229.0-2.module_el8.10.0+3792+03eaed9c
2:2.229.0-2.module_el8.10.0+3792+03eaed9c
containernetworking-plugins
AlmaLinux:8
From an advisory covering 5 CVEs
 before 1:1.4.0-2.module_el8.10.0+3792+03eaed9c
1:1.4.0-2.module_el8.10.0+3792+03eaed9c
containers-common
AlmaLinux:8
From an advisory covering 5 CVEs
 before 2:1-81.module_el8.10.0+3792+03eaed9c
2:1-81.module_el8.10.0+3792+03eaed9c
crit
AlmaLinux:8
From an advisory covering 5 CVEs
 before 3.18-5.module_el8.10.0+3845+87b84552
3.18-5.module_el8.10.0+3845+87b84552
criu
AlmaLinux:8
From an advisory covering 5 CVEs
 before 3.18-5.module_el8.10.0+3845+87b84552
3.18-5.module_el8.10.0+3845+87b84552
criu-devel
AlmaLinux:8
From an advisory covering 5 CVEs
 before 3.18-5.module_el8.10.0+3845+87b84552
3.18-5.module_el8.10.0+3845+87b84552
criu-libs
AlmaLinux:8
From an advisory covering 5 CVEs
 before 3.18-5.module_el8.10.0+3845+87b84552
3.18-5.module_el8.10.0+3845+87b84552
crun
AlmaLinux:8
From an advisory covering 5 CVEs
 before 1.14.3-2.module_el8.10.0+3845+87b84552
1.14.3-2.module_el8.10.0+3845+87b84552
fuse-overlayfs
AlmaLinux:8
From an advisory covering 5 CVEs
 before 1.13-1.module_el8.10.0+3792+03eaed9c
1.13-1.module_el8.10.0+3792+03eaed9c
libslirp
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.4.0-2.module_el8.10.0+3845+87b84552
4.4.0-2.module_el8.10.0+3845+87b84552
libslirp-devel
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.4.0-2.module_el8.10.0+3845+87b84552
4.4.0-2.module_el8.10.0+3845+87b84552
netavark
AlmaLinux:8
From an advisory covering 5 CVEs
 before 2:1.10.3-1.module_el8.10.0+3845+87b84552
2:1.10.3-1.module_el8.10.0+3845+87b84552
oci-seccomp-bpf-hook
AlmaLinux:8
From an advisory covering 5 CVEs
 before 1.2.10-1.module_el8.10.0+3792+03eaed9c
1.2.10-1.module_el8.10.0+3792+03eaed9c
podman
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4:4.9.4-1.module_el8.10.0+3845+87b84552
4:4.9.4-1.module_el8.10.0+3845+87b84552
podman-catatonit
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4:4.9.4-1.module_el8.10.0+3845+87b84552
4:4.9.4-1.module_el8.10.0+3845+87b84552
podman-docker
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4:4.9.4-1.module_el8.10.0+3845+87b84552
4:4.9.4-1.module_el8.10.0+3845+87b84552
podman-gvproxy
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4:4.9.4-1.module_el8.10.0+3845+87b84552
4:4.9.4-1.module_el8.10.0+3845+87b84552
podman-plugins
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4:4.9.4-1.module_el8.10.0+3845+87b84552
4:4.9.4-1.module_el8.10.0+3845+87b84552
podman-remote
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4:4.9.4-1.module_el8.10.0+3845+87b84552
4:4.9.4-1.module_el8.10.0+3845+87b84552
podman-tests
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4:4.9.4-1.module_el8.10.0+3845+87b84552
4:4.9.4-1.module_el8.10.0+3845+87b84552
python3-criu
AlmaLinux:8
From an advisory covering 5 CVEs
 before 3.18-5.module_el8.10.0+3845+87b84552
3.18-5.module_el8.10.0+3845+87b84552
python3-podman
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.9.0-1.module_el8.10.0+3792+03eaed9c
4.9.0-1.module_el8.10.0+3792+03eaed9c
runc
AlmaLinux:8
From an advisory covering 5 CVEs
 before 1:1.1.12-1.module_el8.10.0+3845+87b84552
1:1.1.12-1.module_el8.10.0+3845+87b84552
skopeo
AlmaLinux:8
From an advisory covering 5 CVEs
 before 2:1.14.3-2.module_el8.10.0+3845+87b84552
2:1.14.3-2.module_el8.10.0+3845+87b84552
skopeo-tests
AlmaLinux:8
From an advisory covering 5 CVEs
 before 2:1.14.3-2.module_el8.10.0+3845+87b84552
2:1.14.3-2.module_el8.10.0+3845+87b84552
slirp4netns
AlmaLinux:8
From an advisory covering 5 CVEs
 before 1.2.3-1.module_el8.10.0+3845+87b84552
1.2.3-1.module_el8.10.0+3845+87b84552
toolbox
AlmaLinux:8
From an advisory covering 5 CVEs
 before 0.0.99.5-2.module_el8.10.0+3845+87b84552
0.0.99.5-2.module_el8.10.0+3845+87b84552
toolbox-tests
AlmaLinux:8
From an advisory covering 5 CVEs
 before 0.0.99.5-2.module_el8.10.0+3845+87b84552
0.0.99.5-2.module_el8.10.0+3845+87b84552
udica
AlmaLinux:8
From an advisory covering 5 CVEs
 before 0.2.6-21.module_el8.10.0+3845+87b84552
0.2.6-21.module_el8.10.0+3845+87b84552
aardvark-dns
AlmaLinux:8
 before 2:1.10.0-1.module_el8.10.0+3792+03eaed9c
2:1.10.0-1.module_el8.10.0+3792+03eaed9c
aardvark-dns
AlmaLinux:8
 before 2:1.10.0-1.module_el8.10.0+3858+6ad51f9f
2:1.10.0-1.module_el8.10.0+3858+6ad51f9f
buildah
AlmaLinux:8
 before 2:1.33.8-1.module_el8.10.0+3862+c5a22a8d
2:1.33.8-1.module_el8.10.0+3862+c5a22a8d
buildah-tests
AlmaLinux:8
 before 2:1.33.8-1.module_el8.10.0+3862+c5a22a8d
2:1.33.8-1.module_el8.10.0+3862+c5a22a8d
cockpit-podman
AlmaLinux:8
 before 84.1-1.module_el8.10.0+3858+6ad51f9f
84.1-1.module_el8.10.0+3858+6ad51f9f
conmon
AlmaLinux:8
 before 3:2.1.10-1.module_el8.10.0+3858+6ad51f9f
3:2.1.10-1.module_el8.10.0+3858+6ad51f9f
azcopy
Azure Linux:2
 before 10.24.0-1
10.24.0-1
blobfuse2
Azure Linux:2
 before 2.1.2-7
2.1.2-7
cert-manager
Azure Linux:2
 before 1.11.2-14
1.11.2-14
cf-cli
Azure Linux:2
 before 8.4.0-22
8.4.0-22
coredns
Azure Linux:2
 before 1.11.1-12
1.11.1-12
cri-tools
Azure Linux:2
 before 1.29.0-5
1.29.0-5
etcd
Azure Linux:2
 before 3.5.12-6
3.5.12-6
influxdb
Azure Linux:2
 before 2.6.1-18
2.6.1-18
kata-containers
Azure Linux:2
 before 3.2.0.azl2-1
3.2.0.azl2-1
kata-containers-cc
Azure Linux:2
 before 3.2.0.azl2-1
3.2.0.azl2-1
keda
Azure Linux:2
 before 2.4.0-24
2.4.0-24
kubernetes
Azure Linux:2
 before 1.28.4-12
1.28.4-12
kubevirt
Azure Linux:2
 before 0.59.0-17
0.59.0-17
moby-buildx
Azure Linux:2
 before 0.7.1-24
0.7.1-24
moby-compose
Azure Linux:2
 before 2.17.3-5
2.17.3-5
moby-containerd
Azure Linux:2
 before 1.6.26-8
1.6.26-8
moby-containerd-cc
Azure Linux:2
 before 1.7.7-8
1.7.7-8
opa
Azure Linux:2
 before 0.63.0-1
0.63.0-1
packer
Azure Linux:2
 before 1.9.5-4
1.9.5-4
prometheus
Azure Linux:2
 before 2.37.9-1
2.37.9-1
prometheus-adapter
Azure Linux:2
 before 0.10.0-12
0.10.0-12
skopeo
Azure Linux:2
 before 1.14.2-9
1.14.2-9
sriov-network-device-plugin
Azure Linux:2
 before 3.6.2-6
3.6.2-6
telegraf
Azure Linux:2
 before 1.29.4-8
1.29.4-8
terraform
Azure Linux:2
 before 1.3.2-20
1.3.2-20
vitess
Azure Linux:2
 before 17.0.7-1
17.0.7-1
azcopy
Azure Linux:3
 before 10.24.0-1
10.24.0-1
blobfuse2
Azure Linux:3
 before 2.3.0-1
2.3.0-1
cert-manager
Azure Linux:3
 before 1.12.12-1
1.12.12-1
cf-cli
Azure Linux:3
 before 8.7.3-3
8.7.3-3
containerd
Azure Linux:3
 before 1.7.13-5
1.7.13-5
containerized-data-importer
Azure Linux:3
 before 1.57.0-6
1.57.0-6
coredns
Azure Linux:3
 before 1.11.1-3
1.11.1-3
cri-tools
Azure Linux:3
 before 1.30.1-1
1.30.1-1
docker-buildx
Azure Linux:3
 before 0.14.0-1
0.14.0-1
docker-cli
Azure Linux:3
 before 25.0.3-2
25.0.3-2
docker-compose
Azure Linux:3
 before 2.27.0-1
2.27.0-1
etcd
Azure Linux:3
 before 3.5.12-2
3.5.12-2
flannel
Azure Linux:3
 before 0.24.2-8
0.24.2-8
gh
Azure Linux:3
 before 2.62.0-1
2.62.0-1
influxdb
Azure Linux:3
 before 2.7.3-7
2.7.3-7
kata-containers
Azure Linux:3
 before 3.2.0.azl4-1
3.2.0.azl4-1
kata-containers-cc
Azure Linux:3
 before 3.2.0.azl4-1
3.2.0.azl4-1
keda
Azure Linux:3
 before 2.14.0-1
2.14.0-1
kube-vip-cloud-provider
Azure Linux:3
 before 0.0.10-1
0.0.10-1
kubernetes
Azure Linux:3
 before 1.30.1-1
1.30.1-1
kubevirt
Azure Linux:3
 before 1.2.0-10
1.2.0-10
libcontainers-common
Azure Linux:3
 before 20240213-3
20240213-3
moby-containerd-cc
Azure Linux:3
 before 1.7.7-5
1.7.7-5
skopeo
TuxCare:AlmaLinux:9.2
 before 2:1.11.2-0.1.el9.tuxcare.els5
2:1.11.2-0.1.el9.tuxcare.els5
skopeo-tests
TuxCare:AlmaLinux:9.2
 before 2:1.11.2-0.1.el9.tuxcare.els5
2:1.11.2-0.1.el9.tuxcare.els5
golang-google-protobuf
Debian:12
 All versions, plus listed versions
1.28.1-31.31.0-11.31.0-1~exp11.31.0-1~exp21.31.0-1~exp3
Show 6 moreShow less
1.32.0-11.33.0-11.36.10-11.36.10-21.36.5-11.36.7-1
 None known
golang-google-protobuf
Debian:13
 before 1.33.0-1
1.33.0-1
golang-google-protobuf
Debian:14
 before 1.33.0-1
1.33.0-1
cri-tools
openEuler:22.03-LTS-SP1
From an advisory covering 3 CVEs
 before 1.22.0-5.oe2203sp1
1.22.0-5.oe2203sp1
cri-tools
openEuler:22.03-LTS-SP2
From an advisory covering 3 CVEs
 before 1.22.0-5.oe2203sp2
1.22.0-5.oe2203sp2
cri-tools
openEuler:22.03-LTS-SP3
From an advisory covering 3 CVEs
 before 1.22.0-5.oe2203sp3
1.22.0-5.oe2203sp3
cri-o
openEuler:22.03-LTS-SP3
 before 1.23.2-11.oe2203sp3
1.23.2-11.oe2203sp3
microshift
Red Hat:openshift:4.16::el9
From an advisory covering 2 CVEs
 before 0:4.16.0-202406260523.p0.gc5a37df.assembly.4.16.0.el9
0:4.16.0-202406260523.p0.gc5a37df.assembly.4.16.0.el9
microshift-greenboot
Red Hat:openshift:4.16::el9
From an advisory covering 2 CVEs
 before 0:4.16.0-202406260523.p0.gc5a37df.assembly.4.16.0.el9
0:4.16.0-202406260523.p0.gc5a37df.assembly.4.16.0.el9
microshift-multus
Red Hat:openshift:4.16::el9
From an advisory covering 2 CVEs
 before 0:4.16.0-202406260523.p0.gc5a37df.assembly.4.16.0.el9
0:4.16.0-202406260523.p0.gc5a37df.assembly.4.16.0.el9
microshift-multus-release-info
Red Hat:openshift:4.16::el9
From an advisory covering 2 CVEs
 before 0:4.16.0-202406260523.p0.gc5a37df.assembly.4.16.0.el9
0:4.16.0-202406260523.p0.gc5a37df.assembly.4.16.0.el9
microshift-networking
Red Hat:openshift:4.16::el9
From an advisory covering 2 CVEs
 before 0:4.16.0-202406260523.p0.gc5a37df.assembly.4.16.0.el9
0:4.16.0-202406260523.p0.gc5a37df.assembly.4.16.0.el9
microshift-olm
Red Hat:openshift:4.16::el9
From an advisory covering 2 CVEs
 before 0:4.16.0-202406260523.p0.gc5a37df.assembly.4.16.0.el9
0:4.16.0-202406260523.p0.gc5a37df.assembly.4.16.0.el9
microshift-olm-release-info
Red Hat:openshift:4.16::el9
From an advisory covering 2 CVEs
 before 0:4.16.0-202406260523.p0.gc5a37df.assembly.4.16.0.el9
0:4.16.0-202406260523.p0.gc5a37df.assembly.4.16.0.el9
microshift-release-info
Red Hat:openshift:4.16::el9
From an advisory covering 2 CVEs
 before 0:4.16.0-202406260523.p0.gc5a37df.assembly.4.16.0.el9
0:4.16.0-202406260523.p0.gc5a37df.assembly.4.16.0.el9
microshift-selinux
Red Hat:openshift:4.16::el9
From an advisory covering 2 CVEs
 before 0:4.16.0-202406260523.p0.gc5a37df.assembly.4.16.0.el9
0:4.16.0-202406260523.p0.gc5a37df.assembly.4.16.0.el9
python-eventlet
Red Hat:openshift_ironic:4.16::el9
From an advisory covering 9 CVEs
 before 0:0.33.1-6.el9
0:0.33.1-6.el9
python3-eventlet
Red Hat:openshift_ironic:4.16::el9
From an advisory covering 9 CVEs
 before 0:0.33.1-6.el9
0:0.33.1-6.el9
openshift
Red Hat:openshift:4.16::el8
From an advisory covering 9 CVEs
 before 0:4.16.0-202406170957.p0.g29c95f3.assembly.stream.el8
0:4.16.0-202406170957.p0.g29c95f3.assembly.stream.el8
openshift-hyperkube
Red Hat:openshift:4.16::el8
From an advisory covering 9 CVEs
 before 0:4.16.0-202406170957.p0.g29c95f3.assembly.stream.el8
0:4.16.0-202406170957.p0.g29c95f3.assembly.stream.el8
openshift-kube-apiserver
Red Hat:openshift:4.16::el8
From an advisory covering 9 CVEs
 before 0:4.16.0-202406170957.p0.g29c95f3.assembly.stream.el8
0:4.16.0-202406170957.p0.g29c95f3.assembly.stream.el8
openshift-kube-controller-manager
Red Hat:openshift:4.16::el8
From an advisory covering 9 CVEs
 before 0:4.16.0-202406170957.p0.g29c95f3.assembly.stream.el8
0:4.16.0-202406170957.p0.g29c95f3.assembly.stream.el8
openshift-kube-scheduler
Red Hat:openshift:4.16::el8
From an advisory covering 9 CVEs
 before 0:4.16.0-202406170957.p0.g29c95f3.assembly.stream.el8
0:4.16.0-202406170957.p0.g29c95f3.assembly.stream.el8
openshift-kubelet
Red Hat:openshift:4.16::el8
From an advisory covering 9 CVEs
 before 0:4.16.0-202406170957.p0.g29c95f3.assembly.stream.el8
0:4.16.0-202406170957.p0.g29c95f3.assembly.stream.el8
ose-azure-acr-image-credential-provider
Red Hat:openshift:4.16::el8
From an advisory covering 9 CVEs
 before 0:4.16.0-202404301345.p0.g0e95532.assembly.stream.el8
0:4.16.0-202404301345.p0.g0e95532.assembly.stream.el8
openshift
Red Hat:openshift:4.16::el9
From an advisory covering 9 CVEs
 before 0:4.16.0-202406170957.p0.g29c95f3.assembly.stream.el9
0:4.16.0-202406170957.p0.g29c95f3.assembly.stream.el9
openshift-hyperkube
Red Hat:openshift:4.16::el9
From an advisory covering 9 CVEs
 before 0:4.16.0-202406170957.p0.g29c95f3.assembly.stream.el9
0:4.16.0-202406170957.p0.g29c95f3.assembly.stream.el9
openshift-kube-apiserver
Red Hat:openshift:4.16::el9
From an advisory covering 9 CVEs
 before 0:4.16.0-202406170957.p0.g29c95f3.assembly.stream.el9
0:4.16.0-202406170957.p0.g29c95f3.assembly.stream.el9
openshift-kube-controller-manager
Red Hat:openshift:4.16::el9
From an advisory covering 9 CVEs
 before 0:4.16.0-202406170957.p0.g29c95f3.assembly.stream.el9
0:4.16.0-202406170957.p0.g29c95f3.assembly.stream.el9
openshift-kube-scheduler
Red Hat:openshift:4.16::el9
From an advisory covering 9 CVEs
 before 0:4.16.0-202406170957.p0.g29c95f3.assembly.stream.el9
0:4.16.0-202406170957.p0.g29c95f3.assembly.stream.el9
openshift-kubelet
Red Hat:openshift:4.16::el9
From an advisory covering 9 CVEs
 before 0:4.16.0-202406170957.p0.g29c95f3.assembly.stream.el9
0:4.16.0-202406170957.p0.g29c95f3.assembly.stream.el9
ose-azure-acr-image-credential-provider
Red Hat:openshift:4.16::el9
From an advisory covering 9 CVEs
 before 0:4.16.0-202404301345.p0.g0e95532.assembly.stream.el9
0:4.16.0-202404301345.p0.g0e95532.assembly.stream.el9
butane
Red Hat:openshift:4.16::el8
From an advisory covering 9 CVEs
 before 0:0.21.0-1.rhaos4.16.el8
0:0.21.0-1.rhaos4.16.el8
butane-debuginfo
Red Hat:openshift:4.16::el8
From an advisory covering 9 CVEs
 before 0:0.21.0-1.rhaos4.16.el8
0:0.21.0-1.rhaos4.16.el8
butane-debugsource
Red Hat:openshift:4.16::el8
From an advisory covering 9 CVEs
 before 0:0.21.0-1.rhaos4.16.el8
0:0.21.0-1.rhaos4.16.el8
butane-redistributable
Red Hat:openshift:4.16::el8
From an advisory covering 9 CVEs
 before 0:0.21.0-1.rhaos4.16.el8
0:0.21.0-1.rhaos4.16.el8
cri-o
Red Hat:openshift:4.16::el8
From an advisory covering 9 CVEs
 before 0:1.29.5-5.rhaos4.16.git7032128.el8
0:1.29.5-5.rhaos4.16.git7032128.el8
cri-o-debuginfo
Red Hat:openshift:4.16::el8
From an advisory covering 9 CVEs
 before 0:1.29.5-5.rhaos4.16.git7032128.el8
0:1.29.5-5.rhaos4.16.git7032128.el8
cri-o-debugsource
Red Hat:openshift:4.16::el8
From an advisory covering 9 CVEs
 before 0:1.29.5-5.rhaos4.16.git7032128.el8
0:1.29.5-5.rhaos4.16.git7032128.el8
cri-tools
Red Hat:openshift:4.16::el8
From an advisory covering 9 CVEs
 before 0:1.29.0-3.1.el8
0:1.29.0-3.1.el8
cri-tools-debuginfo
Red Hat:openshift:4.16::el8
From an advisory covering 9 CVEs
 before 0:1.29.0-3.1.el8
0:1.29.0-3.1.el8
cri-tools-debugsource
Red Hat:openshift:4.16::el8
From an advisory covering 9 CVEs
 before 0:1.29.0-3.1.el8
0:1.29.0-3.1.el8
ose-aws-ecr-image-credential-provider
Red Hat:openshift:4.16::el8
From an advisory covering 9 CVEs
 before 0:4.16.0-202405311136.p0.ga53e9de.assembly.stream.el8
0:4.16.0-202405311136.p0.ga53e9de.assembly.stream.el8
ose-gcp-gcr-image-credential-provider
Red Hat:openshift:4.16::el8
From an advisory covering 9 CVEs
 before 0:4.16.0-202404181812.p0.g26b43df.assembly.stream.el8
0:4.16.0-202404181812.p0.g26b43df.assembly.stream.el8
podman
Red Hat:openshift:4.16::el8
From an advisory covering 9 CVEs
 before 4:4.9.4-5.1.rhaos4.16.el8
4:4.9.4-5.1.rhaos4.16.el8
podman-catatonit
Red Hat:openshift:4.16::el8
From an advisory covering 9 CVEs
 before 4:4.9.4-5.1.rhaos4.16.el8
4:4.9.4-5.1.rhaos4.16.el8
podman-catatonit-debuginfo
Red Hat:openshift:4.16::el8
From an advisory covering 9 CVEs
 before 4:4.9.4-5.1.rhaos4.16.el8
4:4.9.4-5.1.rhaos4.16.el8
podman-debuginfo
Red Hat:openshift:4.16::el8
From an advisory covering 9 CVEs
 before 4:4.9.4-5.1.rhaos4.16.el8
4:4.9.4-5.1.rhaos4.16.el8
podman-debugsource
Red Hat:openshift:4.16::el8
From an advisory covering 9 CVEs
 before 4:4.9.4-5.1.rhaos4.16.el8
4:4.9.4-5.1.rhaos4.16.el8
podman-docker
Red Hat:openshift:4.16::el8
From an advisory covering 9 CVEs
 before 4:4.9.4-5.1.rhaos4.16.el8
4:4.9.4-5.1.rhaos4.16.el8
podman-gvproxy
Red Hat:openshift:4.16::el8
From an advisory covering 9 CVEs
 before 4:4.9.4-5.1.rhaos4.16.el8
4:4.9.4-5.1.rhaos4.16.el8
podman-gvproxy-debuginfo
Red Hat:openshift:4.16::el8
From an advisory covering 9 CVEs
 before 4:4.9.4-5.1.rhaos4.16.el8
4:4.9.4-5.1.rhaos4.16.el8
podman-plugins
Red Hat:openshift:4.16::el8
From an advisory covering 9 CVEs
 before 4:4.9.4-5.1.rhaos4.16.el8
4:4.9.4-5.1.rhaos4.16.el8
podman-plugins-debuginfo
Red Hat:openshift:4.16::el8
From an advisory covering 9 CVEs
 before 4:4.9.4-5.1.rhaos4.16.el8
4:4.9.4-5.1.rhaos4.16.el8
podman-remote
Red Hat:openshift:4.16::el8
From an advisory covering 9 CVEs
 before 4:4.9.4-5.1.rhaos4.16.el8
4:4.9.4-5.1.rhaos4.16.el8
podman-remote-debuginfo
Red Hat:openshift:4.16::el8
From an advisory covering 9 CVEs
 before 4:4.9.4-5.1.rhaos4.16.el8
4:4.9.4-5.1.rhaos4.16.el8
podman
Rocky Linux:9
From an advisory covering 2 CVEs
 before 4:4.9.4-3.el9_4
4:4.9.4-3.el9_4
skopeo
Rocky Linux:9
From an advisory covering 2 CVEs
 before 2:1.14.3-2.el9_4
2:1.14.3-2.el9_4
aardvark-dns
Rocky Linux:8
 before 2:1.10.0-1.module+el8.10.0+1815+5fe7415e
2:1.10.0-1.module+el8.10.0+1815+5fe7415e
aardvark-dns
Rocky Linux:8
 before 2:1.10.0-1.module+el8.10.0+1825+623b0c20
2:1.10.0-1.module+el8.10.0+1825+623b0c20
aardvark-dns
Rocky Linux:8
 before 2:1.10.0-1.module+el8.10.0+1843+6892ab28
2:1.10.0-1.module+el8.10.0+1843+6892ab28
aardvark-dns
Rocky Linux:8
 before 2:1.10.0-1.module+el8.10.0+1872+2e18eb19
2:1.10.0-1.module+el8.10.0+1872+2e18eb19
buildah
Rocky Linux:8
 before 2:1.33.8-1.module+el8.10.0+1833+b6e0f287
2:1.33.8-1.module+el8.10.0+1833+b6e0f287
cockpit-podman
Rocky Linux:8
 before 0:84.1-1.module+el8.10.0+1815+5fe7415e
0:84.1-1.module+el8.10.0+1815+5fe7415e
cockpit-podman
Rocky Linux:8
 before 0:84.1-1.module+el8.10.0+1825+623b0c20
0:84.1-1.module+el8.10.0+1825+623b0c20
cockpit-podman
Rocky Linux:8
 before 0:84.1-1.module+el8.10.0+1843+6892ab28
0:84.1-1.module+el8.10.0+1843+6892ab28
cockpit-podman
Rocky Linux:8
 before 0:84.1-1.module+el8.10.0+1872+2e18eb19
0:84.1-1.module+el8.10.0+1872+2e18eb19
cockpit-podman
Rocky Linux:8
 before 0:84.1-1.module+el8.10.0+1874+ce489889
0:84.1-1.module+el8.10.0+1874+ce489889
cockpit-podman
Rocky Linux:8
 before 0:84.1-1.module+el8.10.0+1880+8e896d1b
0:84.1-1.module+el8.10.0+1880+8e896d1b
cockpit-podman
Rocky Linux:8
 before 0:84.1-1.module+el8.10.0+1896+b18fa106
0:84.1-1.module+el8.10.0+1896+b18fa106
cockpit-podman
Rocky Linux:8
 before 0:84.1-1.module+el8.10.0+1948+4b5cd4a9
0:84.1-1.module+el8.10.0+1948+4b5cd4a9
conmon
Rocky Linux:8
 before 3:2.1.10-1.module+el8.10.0+1815+5fe7415e
3:2.1.10-1.module+el8.10.0+1815+5fe7415e
conmon
Rocky Linux:8
 before 3:2.1.10-1.module+el8.10.0+1843+6892ab28
3:2.1.10-1.module+el8.10.0+1843+6892ab28
conmon
Rocky Linux:8
 before 3:2.1.10-1.module+el8.10.0+1872+2e18eb19
3:2.1.10-1.module+el8.10.0+1872+2e18eb19
conmon
Rocky Linux:8
 before 3:2.1.10-1.module+el8.10.0+1874+ce489889
3:2.1.10-1.module+el8.10.0+1874+ce489889
conmon
Rocky Linux:8
 before 3:2.1.10-1.module+el8.10.0+1880+8e896d1b
3:2.1.10-1.module+el8.10.0+1880+8e896d1b
conmon
Rocky Linux:8
 before 3:2.1.10-1.module+el8.10.0+1896+b18fa106
3:2.1.10-1.module+el8.10.0+1896+b18fa106
conmon
Rocky Linux:8
 before 3:2.1.10-1.module+el8.10.0+1948+4b5cd4a9
3:2.1.10-1.module+el8.10.0+1948+4b5cd4a9
containernetworking-plugins
Rocky Linux:8
 before 1:1.4.0-2.module+el8.10.0+1815+5fe7415e
1:1.4.0-2.module+el8.10.0+1815+5fe7415e
containernetworking-plugins
Rocky Linux:8
 before 1:1.4.0-2.module+el8.10.0+1825+623b0c20
1:1.4.0-2.module+el8.10.0+1825+623b0c20
containers-common
Rocky Linux:8
 before 2:1-81.module+el8.10.0+1815+5fe7415e
2:1-81.module+el8.10.0+1815+5fe7415e
containers-common
Rocky Linux:8
 before 2:1-81.module+el8.10.0+1825+623b0c20
2:1-81.module+el8.10.0+1825+623b0c20
container-selinux
Rocky Linux:8
 before 2:2.229.0-2.module+el8.10.0+1815+5fe7415e
2:2.229.0-2.module+el8.10.0+1815+5fe7415e
container-selinux
Rocky Linux:8
 before 2:2.229.0-2.module+el8.10.0+1825+623b0c20
2:2.229.0-2.module+el8.10.0+1825+623b0c20
container-selinux
Rocky Linux:8
 before 2:2.229.0-2.module+el8.10.0+1843+6892ab28
2:2.229.0-2.module+el8.10.0+1843+6892ab28
container-selinux
Rocky Linux:8
 before 2:2.229.0-2.module+el8.10.0+1872+2e18eb19
2:2.229.0-2.module+el8.10.0+1872+2e18eb19
container-selinux
Rocky Linux:8
 before 2:2.229.0-2.module+el8.10.0+1874+ce489889
2:2.229.0-2.module+el8.10.0+1874+ce489889
container-selinux
Rocky Linux:8
 before 2:2.229.0-2.module+el8.10.0+1880+8e896d1b
2:2.229.0-2.module+el8.10.0+1880+8e896d1b
container-selinux
Rocky Linux:8
 before 2:2.229.0-2.module+el8.10.0+1896+b18fa106
2:2.229.0-2.module+el8.10.0+1896+b18fa106
container-selinux
Rocky Linux:8
 before 2:2.229.0-2.module+el8.10.0+1948+4b5cd4a9
2:2.229.0-2.module+el8.10.0+1948+4b5cd4a9
criu
Rocky Linux:8
 before 0:3.18-5.module+el8.10.0+1815+5fe7415e
0:3.18-5.module+el8.10.0+1815+5fe7415e
criu
Rocky Linux:8
 before 0:3.18-5.module+el8.10.0+1825+623b0c20
0:3.18-5.module+el8.10.0+1825+623b0c20
criu
Rocky Linux:8
 before 0:3.18-5.module+el8.10.0+1843+6892ab28
0:3.18-5.module+el8.10.0+1843+6892ab28
criu
Rocky Linux:8
 before 0:3.18-5.module+el8.10.0+1872+2e18eb19
0:3.18-5.module+el8.10.0+1872+2e18eb19
criu
Rocky Linux:8
 before 0:3.18-5.module+el8.10.0+1874+ce489889
0:3.18-5.module+el8.10.0+1874+ce489889
criu
Rocky Linux:8
 before 0:3.18-5.module+el8.10.0+1880+8e896d1b
0:3.18-5.module+el8.10.0+1880+8e896d1b
criu
Rocky Linux:8
 before 0:3.18-5.module+el8.10.0+1896+b18fa106
0:3.18-5.module+el8.10.0+1896+b18fa106
criu
Rocky Linux:8
 before 0:3.18-5.module+el8.10.0+1948+4b5cd4a9
0:3.18-5.module+el8.10.0+1948+4b5cd4a9
crun
Rocky Linux:8
 before 0:1.14.3-2.module+el8.10.0+1815+5fe7415e
0:1.14.3-2.module+el8.10.0+1815+5fe7415e
crun
Rocky Linux:8
 before 0:1.14.3-2.module+el8.10.0+1825+623b0c20
0:1.14.3-2.module+el8.10.0+1825+623b0c20
crun
Rocky Linux:8
 before 0:1.14.3-2.module+el8.10.0+1843+6892ab28
0:1.14.3-2.module+el8.10.0+1843+6892ab28
crun
Rocky Linux:8
 before 0:1.14.3-2.module+el8.10.0+1872+2e18eb19
0:1.14.3-2.module+el8.10.0+1872+2e18eb19
crun
Rocky Linux:8
 before 0:1.14.3-2.module+el8.10.0+1874+ce489889
0:1.14.3-2.module+el8.10.0+1874+ce489889
crun
Rocky Linux:8
 before 0:1.14.3-2.module+el8.10.0+1880+8e896d1b
0:1.14.3-2.module+el8.10.0+1880+8e896d1b
crun
Rocky Linux:8
 before 0:1.14.3-2.module+el8.10.0+1896+b18fa106
0:1.14.3-2.module+el8.10.0+1896+b18fa106
podman
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 2 CVEs
 before 4.9.5-150500.3.12.1
4.9.5-150500.3.12.1
podman
SUSE:Linux Enterprise Module for Containers 15 SP5
From an advisory covering 2 CVEs
 before 4.9.5-150500.3.12.1
4.9.5-150500.3.12.1
podman
SUSE:Linux Enterprise Module for Containers 15 SP6
From an advisory covering 2 CVEs
 before 4.9.5-150500.3.12.1
4.9.5-150500.3.12.1
podman
openSUSE:Leap 15.5
From an advisory covering 2 CVEs
 before 4.9.5-150500.3.12.1
4.9.5-150500.3.12.1
podman
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 4.9.5-150500.3.12.1
4.9.5-150500.3.12.1
podman
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 2 CVEs
 before 4.9.5-150300.9.31.1
4.9.5-150300.9.31.1
podman
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 2 CVEs
 before 4.9.5-150300.9.31.1
4.9.5-150300.9.31.1
podman
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 2 CVEs
 before 4.9.5-150300.9.31.1
4.9.5-150300.9.31.1
podman
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 2 CVEs
 before 4.9.5-150300.9.31.1
4.9.5-150300.9.31.1
podman
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 2 CVEs
 before 4.9.5-150300.9.31.1
4.9.5-150300.9.31.1
podman
SUSE:Enterprise Storage 7.1
From an advisory covering 2 CVEs
 before 4.9.5-150300.9.31.1
4.9.5-150300.9.31.1
podman
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 2 CVEs
 before 4.9.5-150400.4.27.1
4.9.5-150400.4.27.1
podman
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 2 CVEs
 before 4.9.5-150400.4.27.1
4.9.5-150400.4.27.1
podman
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 2 CVEs
 before 4.9.5-150400.4.27.1
4.9.5-150400.4.27.1
podman
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 4.9.5-150400.4.27.1
4.9.5-150400.4.27.1
podman
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 4.9.5-150400.4.27.1
4.9.5-150400.4.27.1
podman
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 2 CVEs
 before 4.9.5-150400.4.27.1
4.9.5-150400.4.27.1
podman
openSUSE:Leap Micro 5.3
From an advisory covering 2 CVEs
 before 4.9.5-150400.4.27.1
4.9.5-150400.4.27.1
podman
openSUSE:Leap Micro 5.4
From an advisory covering 2 CVEs
 before 4.9.5-150400.4.27.1
4.9.5-150400.4.27.1
kubernetes1.26
SUSE:Linux Enterprise Module for Containers 15 SP5
From an advisory covering 3 CVEs
 before 1.26.15-150400.9.11.1
1.26.15-150400.9.11.1
kubernetes1.26
SUSE:Linux Enterprise Module for Containers 15 SP6
From an advisory covering 3 CVEs
 before 1.26.15-150400.9.11.1
1.26.15-150400.9.11.1
kubernetes1.26
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 3 CVEs
 before 1.26.15-150400.9.11.1
1.26.15-150400.9.11.1
kubernetes1.26
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 1.26.15-150400.9.11.1
1.26.15-150400.9.11.1
kubernetes1.26
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 3 CVEs
 before 1.26.15-150400.9.11.1
1.26.15-150400.9.11.1
kubernetes1.26
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 3 CVEs
 before 1.26.15-150400.9.11.1
1.26.15-150400.9.11.1
kubernetes1.26
openSUSE:Leap 15.5
From an advisory covering 3 CVEs
 before 1.26.15-150400.9.11.1
1.26.15-150400.9.11.1
kubernetes1.26
openSUSE:Leap 15.6
From an advisory covering 3 CVEs
 before 1.26.15-150400.9.11.1
1.26.15-150400.9.11.1
kubernetes1.28
SUSE:Linux Enterprise Module for Containers 15 SP5
From an advisory covering 4 CVEs
 before 1.28.13-150400.9.8.1
1.28.13-150400.9.8.1
kubernetes1.28
SUSE:Linux Enterprise Module for Containers 15 SP6
From an advisory covering 4 CVEs
 before 1.28.13-150400.9.8.1
1.28.13-150400.9.8.1
kubernetes1.28
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 4 CVEs
 before 1.28.13-150400.9.8.1
1.28.13-150400.9.8.1
kubernetes1.28
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 4 CVEs
 before 1.28.13-150400.9.8.1
1.28.13-150400.9.8.1
kubernetes1.28
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 4 CVEs
 before 1.28.13-150400.9.8.1
1.28.13-150400.9.8.1
kubernetes1.28
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 4 CVEs
 before 1.28.13-150400.9.8.1
1.28.13-150400.9.8.1
kubernetes1.28
openSUSE:Leap 15.5
From an advisory covering 4 CVEs
 before 1.28.13-150400.9.8.1
1.28.13-150400.9.8.1
kubernetes1.28
openSUSE:Leap 15.6
From an advisory covering 4 CVEs
 before 1.28.13-150400.9.8.1
1.28.13-150400.9.8.1
kubernetes1.27
SUSE:Linux Enterprise Module for Containers 15 SP5
From an advisory covering 4 CVEs
 before 1.27.16-150400.9.10.1
1.27.16-150400.9.10.1
kubernetes1.27
SUSE:Linux Enterprise Module for Containers 15 SP6
From an advisory covering 4 CVEs
 before 1.27.16-150400.9.10.1
1.27.16-150400.9.10.1
kubernetes1.27
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 4 CVEs
 before 1.27.16-150400.9.10.1
1.27.16-150400.9.10.1
kubernetes1.27
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 4 CVEs
 before 1.27.16-150400.9.10.1
1.27.16-150400.9.10.1
kubernetes1.27
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 4 CVEs
 before 1.27.16-150400.9.10.1
1.27.16-150400.9.10.1
kubernetes1.27
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 4 CVEs
 before 1.27.16-150400.9.10.1
1.27.16-150400.9.10.1
kubernetes1.27
openSUSE:Leap 15.5
From an advisory covering 4 CVEs
 before 1.27.16-150400.9.10.1
1.27.16-150400.9.10.1
kubernetes1.27
openSUSE:Leap 15.6
From an advisory covering 4 CVEs
 before 1.27.16-150400.9.10.1
1.27.16-150400.9.10.1
docker
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 8 CVEs
 before 25.0.6_ce-150000.207.1
25.0.6_ce-150000.207.1
docker
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 8 CVEs
 before 25.0.6_ce-150000.207.1
25.0.6_ce-150000.207.1
docker
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 8 CVEs
 before 25.0.6_ce-150000.207.1
25.0.6_ce-150000.207.1
docker
SUSE:Linux Enterprise Module for Containers 15 SP5
From an advisory covering 8 CVEs
 before 25.0.6_ce-150000.207.1
25.0.6_ce-150000.207.1
docker
SUSE:Linux Enterprise Module for Containers 15 SP6
From an advisory covering 8 CVEs
 before 25.0.6_ce-150000.207.1
25.0.6_ce-150000.207.1
docker
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 8 CVEs
 before 25.0.6_ce-150000.207.1
25.0.6_ce-150000.207.1
buildah
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 8 CVEs
 before 1.35.4-150300.8.25.1
1.35.4-150300.8.25.1
docker
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 8 CVEs
 before 25.0.6_ce-150000.207.1
25.0.6_ce-150000.207.1
docker
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 8 CVEs
 before 25.0.6_ce-150000.207.1
25.0.6_ce-150000.207.1
docker
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 8 CVEs
 before 25.0.6_ce-150000.207.1
25.0.6_ce-150000.207.1
docker
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 8 CVEs
 before 25.0.6_ce-150000.207.1
25.0.6_ce-150000.207.1
buildah
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 8 CVEs
 before 1.35.4-150300.8.25.1
1.35.4-150300.8.25.1
docker
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 8 CVEs
 before 25.0.6_ce-150000.207.1
25.0.6_ce-150000.207.1
docker
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 8 CVEs
 before 25.0.6_ce-150000.207.1
25.0.6_ce-150000.207.1
docker
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 8 CVEs
 before 25.0.6_ce-150000.207.1
25.0.6_ce-150000.207.1
buildah
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 8 CVEs
 before 1.35.4-150300.8.25.1
1.35.4-150300.8.25.1
docker
openSUSE:Leap Micro 5.5
From an advisory covering 8 CVEs
 before 25.0.6_ce-150000.207.1
25.0.6_ce-150000.207.1
docker
openSUSE:Leap 15.5
From an advisory covering 8 CVEs
 before 25.0.6_ce-150000.207.1
25.0.6_ce-150000.207.1
docker
openSUSE:Leap 15.6
From an advisory covering 8 CVEs
 before 25.0.6_ce-150000.207.1
25.0.6_ce-150000.207.1
buildah
openSUSE:Leap 15.5
From an advisory covering 4 CVEs
 before 1.35.4-150500.3.10.1
1.35.4-150500.3.10.1
buildah
openSUSE:Leap 15.6
From an advisory covering 4 CVEs
 before 1.35.4-150500.3.10.1
1.35.4-150500.3.10.1
kubernetes1.24
openSUSE:Leap 15.5
From an advisory covering 4 CVEs
 before 1.24.17-150500.3.22.1
1.24.17-150500.3.22.1
kubernetes1.24
openSUSE:Leap 15.6
From an advisory covering 4 CVEs
 before 1.24.17-150500.3.22.1
1.24.17-150500.3.22.1
kubernetes1.25
openSUSE:Leap 15.5
From an advisory covering 4 CVEs
 before 1.25.16-150400.9.16.1
1.25.16-150400.9.16.1
kubernetes1.25
openSUSE:Leap 15.6
From an advisory covering 4 CVEs
 before 1.25.16-150400.9.16.1
1.25.16-150400.9.16.1
google-osconfig-agent
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
20210219.00-0ubuntu1~16.04.020230504.00-0ubuntu1~16.04.020240320.00-0ubuntu1~16.04.020240524.03-0ubuntu2~16.04.020251028.00-0ubuntu2~16.04.1
 None known
google-osconfig-agent
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
20210219.00-0ubuntu1~18.04.020210608.1-0ubuntu1~18.04.120210608.1-0ubuntu1~18.04.220220824.00-0ubuntu1~18.04.120230504.00-0ubuntu1~18.04.0
Show 4 moreShow less
20240320.00-0ubuntu1~18.04.020240524.03-0ubuntu2~18.04.020240926.03-0ubuntu1~18.04.020251028.00-0ubuntu2~18.04.0
 None known
google-osconfig-agent
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
20210219.00-0ubuntu1~20.04.020210608.1-0ubuntu1~20.04.020210608.1-0ubuntu1~20.04.120220824.00-0ubuntu1~20.04.120230504.00-0ubuntu1~20.04.0
Show 6 moreShow less
20240320.00-0ubuntu1~20.04.020240320.00-0ubuntu1~20.04.120240524.03-0ubuntu2~20.04.020240926.03-0ubuntu1~20.04.020250115.01-0ubuntu1~20.04.020251028.00-0ubuntu2~20.04.0
 None known
golang-google-protobuf
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.25.0+git20201208.160c747-11.27.1-11.27.1-1ubuntu0.1
 None known
google-guest-agent
Ubuntu:22.04:LTS
 before 20231004.02-0ubuntu1~22.04.4, plus listed versions
20210629.00-0ubuntu120210629.00-0ubuntu220220104.00-0ubuntu120220104.00-0ubuntu220220622.00-0ubuntu2~22.04.0
Show 5 moreShow less
20220622.00-0ubuntu2~22.04.120230426.00-0ubuntu2~22.04.020231004.02-0ubuntu1~22.04.120231004.02-0ubuntu1~22.04.220231004.02-0ubuntu1~22.04.3
20231004.02-0ubuntu1~22.04.4
google-osconfig-agent
Ubuntu:22.04:LTS
 before 20230504.00-0ubuntu1~22.04.1, plus listed versions
20210608.1-0ubuntu120210608.1-0ubuntu220210608.1-0ubuntu320220824.00-0ubuntu1~22.04.120220824.00-0ubuntu1~22.04.220230504.00-0ubuntu1~22.04.0
20230504.00-0ubuntu1~22.04.1
golang-google-protobuf
Ubuntu:24.04:LTS
 All versions, plus listed versions
1.28.1-3build11.31.0-11.32.0-11.32.0-1ubuntu0.11.32.0-1ubuntu0.21.32.0-1ubuntu0.3
 None known
google-guest-agent
Ubuntu:24.04:LTS
 before 20240213.00-0ubuntu3.1, plus listed versions
20230426.00-0ubuntu320231004.02-0ubuntu120231004.02-0ubuntu320240213.00-0ubuntu120240213.00-0ubuntu220240213.00-0ubuntu3
20240213.00-0ubuntu3.1
google-osconfig-agent
Ubuntu:24.04:LTS
 before 20240320.00-0ubuntu1~24.04.1, plus listed versions
20230504.00-0ubuntu220230504.00-0ubuntu320240320.00-0ubuntu1~24.04.0
20240320.00-0ubuntu1~24.04.1
golang-google-protobuf
Ubuntu:25.10
 All versions, plus listed versions
1.36.5-1
 None known
golang-google-protobuf
Ubuntu:26.10
 All versions, plus listed versions
1.36.7-11.36.10-2
 None known
golang-google-protobuf
Ubuntu:26.04:LTS
 All versions, plus listed versions
1.36.5-11.36.7-1
 None known
rclone
openSUSE:Tumbleweed
 before 1.66.0-1.1
1.66.0-1.1
buildah
openSUSE:Tumbleweed
 before 1.35.3-1.1
1.35.3-1.1
kubernetes1.26
openSUSE:Tumbleweed
 before 1.26.15-1.1
1.26.15-1.1
kubernetes1.27
openSUSE:Tumbleweed
 before 1.27.12-1.1
1.27.12-1.1
kubernetes1.28
openSUSE:Tumbleweed
 before 1.28.8-1.1
1.28.8-1.1
kubernetes1.29
openSUSE:Tumbleweed
 before 1.29.3-1.1
1.29.3-1.1
velociraptor
openSUSE:Tumbleweed
From an advisory covering 27 CVEs
 before 0.7.0.4.git142.862ef23-1.1
0.7.0.4.git142.862ef23-1.1

History

History
RecordedChangedSources
affected
factsOSV
affected, aliases, aliases_more, referencesOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-24786 is a high vulnerability (CVSS 7.5) in Google.golang.org/protobuf Google.golang.org/protobuf/encoding/protojson, published March 5, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.26%, the 69th percentile. Fixed in google.golang.org/protobuf 1.33.0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 581 package rows and 328 references. The JSON record has them. Also not on the record: 61 aliases. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 111 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open