CVE-2024-24788 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	5.9 MEDIUM	NETWORK	HIGH	NONE	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA-ADP	ADP	5.9 MEDIUM	NETWORK	HIGH	NONE	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: 35%

Debian Releases

Debian Product

Codename

golang-1.15

bullseye

1.15.15-1~deb11u4

fixed

golang-1.19

bookworm

1.19.8-2

fixed

Ubuntu Releases

Ubuntu Product

Codename

golang

focal	dne
jammy	dne
mantic	dne
noble	dne
oracular	dne
plucky	dne
questing	dne

golang-1.6

focal	dne
jammy	dne
mantic	dne
noble	dne
oracular	dne
plucky	dne
questing	dne
xenial	needs-triage

golang-1.8

bionic	needs-triage
focal	dne
jammy	dne
mantic	dne
noble	dne
oracular	dne
plucky	dne
questing	dne

golang-1.9

bionic	needs-triage
focal	dne
jammy	dne
mantic	dne
noble	dne
oracular	dne
plucky	dne
questing	dne

golang-1.10

bionic	needs-triage
focal	dne
jammy	dne
mantic	dne
noble	dne
oracular	dne
plucky	dne
questing	dne
trusty	needs-triage
xenial	needs-triage

golang-1.13

bionic	needs-triage
focal	needs-triage
jammy	needs-triage
mantic	dne
noble	dne
oracular	dne
plucky	dne
questing	dne
xenial	needs-triage

golang-1.14

focal	needs-triage
jammy	dne
mantic	dne
noble	dne
oracular	dne
plucky	dne
questing	dne

golang-1.16

bionic	needs-triage
focal	needs-triage
jammy	dne
mantic	dne
noble	dne
oracular	dne
plucky	dne
questing	dne

golang-1.17

focal	dne
jammy	needs-triage
mantic	dne
noble	dne
oracular	dne
plucky	dne
questing	dne

golang-1.18

bionic	needs-triage
focal	needs-triage
jammy	needs-triage
mantic	dne
noble	dne
oracular	dne
plucky	dne
questing	dne
xenial	needs-triage

golang-1.19

focal	dne
jammy	dne
mantic	dne
noble	dne
oracular	dne
plucky	dne
questing	dne

golang-1.20

focal	needs-triage
jammy	needs-triage
mantic	ignored
noble	dne
oracular	dne
plucky	dne
questing	dne

golang-1.21

focal	not-affected
jammy	not-affected
mantic	not-affected
noble	not-affected
oracular	dne
plucky	dne
questing	dne

golang-1.22

focal	Fixed 1.22.2-2~20.04.1 released
jammy	Fixed 1.22.2-2~22.04.1 released
mantic	ignored
noble	Fixed 1.22.2-2ubuntu0.1 released
oracular	not-affected
plucky	dne
questing	dne

Common Weakness Enumeration

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')
The program contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

References

http://www.openwall.com/lists/oss-security/2024/05/08/3

https://go.dev/cl/578375

https://go.dev/issue/66754

https://groups.google.com/g/golang-announce/c/wkkO4P9stm0

https://pkg.go.dev/vuln/GO-2024-2824

https://security.netapp.com/advisory/ntap-20240605-0002/