CVE-2024-45338

EUVD-2024-3617
An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 54%
Debian logo
Debian Releases
Debian Product
Codename
golang-golang-x-net
bookworm
no-dsa
bullseye
postponed
forky
1:0.27.0-2
fixed
sid
1:0.27.0-2
fixed
trixie
1:0.27.0-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
lxd
bionic
not-affected
focal
not-affected
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
xenial
not-affected
adsys
focal
Fixed 0.9.2~20.04.2ubuntu0.1
released
jammy
Fixed 0.14.3~22.04ubuntu0.1
released
noble
Fixed 0.14.3~24.04ubuntu0.1
released
oracular
Fixed 0.15.2ubuntu0.1
released
plucky
Fixed 0.16.0ubuntu1
released
questing
Fixed 0.16.0ubuntu1
released
golang-golang-x-net
focal
dne
jammy
Fixed 1:0.0+git20211209.491a49a+dfsg-1ubuntu0.1~esm1
released
noble
Fixed 1:0.21.0+dfsg-1ubuntu0.1~esm1
released
oracular
ignored
plucky
needed
questing
needed
golang-golang-x-net-dev
bionic
Fixed 1:0.0+git20170629.c81e7f2+dfsg-2ubuntu0.1~esm1
released
focal
Fixed 1:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm1
released
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
xenial
Fixed 1:0.0+git20160110.4fd4a9f-1ubuntu0.1~esm1
released
juju-core
focal
dne
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
xenial
Fixed 2.3.7-0ubuntu0.16.04.1+esm1
released
containerd
bionic
not-affected
focal
not-affected
jammy
not-affected
noble
not-affected
oracular
not-affected
plucky
not-affected
questing
not-affected
xenial
not-affected
google-guest-agent
bionic
not-affected
focal
not-affected
jammy
not-affected
noble
not-affected
oracular
not-affected
plucky
not-affected
questing
not-affected
xenial
not-affected
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
helm
suse enterprise sap 15 SP6
3.17.1-150000.1.41.1
fixed
suse enterprise sap 15 SP7
3.17.2-150000.1.44.1
fixed
suse enterprise server 15 SP3
3.17.1-150000.1.41.1
fixed
suse enterprise server 15 SP4
3.17.1-150000.1.41.1
fixed
suse enterprise server 15 SP5
3.17.1-150000.1.41.1
fixed
suse enterprise server 15 SP6
3.17.1-150000.1.41.1
fixed
suse enterprise server 15 SP7
3.17.2-150000.1.44.1
fixed
helm-bash-completion
suse enterprise sap 15 SP6
3.17.1-150000.1.41.1
fixed
suse enterprise sap 15 SP7
3.17.1-150000.1.41.1
fixed
suse enterprise server 15 SP3
3.17.1-150000.1.41.1
fixed
suse enterprise server 15 SP4
3.17.1-150000.1.41.1
fixed
suse enterprise server 15 SP5
3.17.1-150000.1.41.1
fixed
suse enterprise server 15 SP6
3.17.1-150000.1.41.1
fixed
suse enterprise server 15 SP7
3.17.1-150000.1.41.1
fixed
helm-zsh-completion
suse enterprise sap 15 SP6
3.17.1-150000.1.41.1
fixed
suse enterprise sap 15 SP7
3.17.1-150000.1.41.1
fixed
suse enterprise server 15 SP3
3.17.1-150000.1.41.1
fixed
suse enterprise server 15 SP4
3.17.1-150000.1.41.1
fixed
suse enterprise server 15 SP5
3.17.1-150000.1.41.1
fixed
suse enterprise server 15 SP6
3.17.1-150000.1.41.1
fixed
suse enterprise server 15 SP7
3.17.1-150000.1.41.1
fixed
kubevirt-manifests
suse enterprise sap 15 SP6
1.4.1-150600.5.24.1
fixed
suse enterprise sap 15 SP7
1.5.2-150700.3.5.2
fixed
suse enterprise server 15 SP6
1.4.1-150600.5.24.1
fixed
suse enterprise server 15 SP7
1.5.2-150700.3.5.2
fixed
kubevirt-virtctl
suse enterprise sap 15 SP6
1.4.1-150600.5.24.1
fixed
suse enterprise sap 15 SP7
1.5.2-150700.3.5.2
fixed
suse enterprise server 15 SP6
1.4.1-150600.5.24.1
fixed
suse enterprise server 15 SP7
1.5.2-150700.3.5.2
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
amazon-cloudwatch-agent
Amazon Linux 2
0:1.300052.1-1.amzn2
fixed
Amazon Linux 2023
0:1.300052.1-1.amzn2023
fixed
ecs-init
Amazon Linux 2023
0:1.89.2-1.amzn2023
fixed
nerdctl
Amazon Linux 2
0:2.0.3-1.amzn2.0.1
fixed
Amazon Linux 2023
0:2.0.3-1.amzn2023.0.1
fixed
nerdctl-debuginfo
Amazon Linux 2
0:2.0.3-1.amzn2.0.1
fixed
runfinch-finch
Amazon Linux 2023
0:1.6.0-1.amzn2023.0.1
fixed
soci-snapshotter
Amazon Linux 2023
0:0.9.0-1.amzn2023.0.1
fixed
Azure Linux logo
Azure Linux Releases
Azure Package
Release
application-gateway-kubernetes-ingress
Azure Linux 3.0
0:1.7.2-3.azl3
fixed
CBL-Mariner 2.0
0:1.4.0-24.cm2
fixed
buildah
Azure Linux 3.0
0:1.41.4-2.azl3
fixed
cert-manager
Azure Linux 3.0
0:1.12.13-3.azl3
fixed
CBL-Mariner 2.0
0:1.11.2-17.cm2
fixed
cf-cli
Azure Linux 3.0
0:8.7.3-5.azl3
fixed
CBL-Mariner 2.0
0:8.4.0-23.cm2
fixed
cni
Azure Linux 3.0
0:1.1.2-4.azl3
fixed
CBL-Mariner 2.0
0:1.0.1-20.cm2
fixed
cni-plugins
Azure Linux 3.0
0:1.4.0-2.azl3
fixed
CBL-Mariner 2.0
0:1.3.0-7.cm2
fixed
containerd2
Azure Linux 3.0
0:2.0.0-3.azl3
fixed
containerized-data-importer
Azure Linux 3.0
0:1.57.0-7.azl3
fixed
CBL-Mariner 2.0
0:1.55.0-22.cm2
fixed
cri-o
CBL-Mariner 2.0
0:1.22.3-9.cm2
fixed
cri-tools
Azure Linux 3.0
0:1.30.1-2.azl3
fixed
CBL-Mariner 2.0
0:1.29.0-6.cm2
fixed
dasel
Azure Linux 3.0
0:2.8.1-2.azl3
fixed
docker-buildx
Azure Linux 3.0
0:0.14.0-3.azl3
fixed
docker-compose
Azure Linux 3.0
0:2.27.0-3.azl3
fixed
gh
Azure Linux 3.0
0:2.62.0-4.azl3
fixed
CBL-Mariner 2.0
0:2.13.0-24.cm2
fixed
helm
Azure Linux 3.0
0:3.15.2-2.azl3
fixed
CBL-Mariner 2.0
0:3.14.2-5.cm2
fixed
ig
Azure Linux 3.0
0:0.32.0-3.azl3
fixed
influxdb
Azure Linux 3.0
0:2.7.3-8.azl3
fixed
CBL-Mariner 2.0
0:2.6.1-19.cm2
fixed
keda
Azure Linux 3.0
0:2.14.1-2.azl3
fixed
CBL-Mariner 2.0
0:2.4.0-25.cm2
fixed
kube-vip-cloud-provider
Azure Linux 3.0
0:0.0.10-3.azl3
fixed
kubernetes
Azure Linux 3.0
0:1.30.3-2.azl3
fixed
CBL-Mariner 2.0
0:0.0.0.cm2
fixed
kubevirt
Azure Linux 3.0
0:1.2.0-12.azl3
fixed
CBL-Mariner 2.0
0:0.59.0-23.cm2
fixed
multus
Azure Linux 3.0
0:4.0.2-4.azl3
fixed
CBL-Mariner 2.0
0:4.0.2-7.cm2
fixed
node-problem-detector
Azure Linux 3.0
0:0.8.15-3.azl3
fixed
packer
Azure Linux 3.0
0:1.9.5-7.azl3
fixed
CBL-Mariner 2.0
0:1.9.5-6.cm2
fixed
podman
Azure Linux 3.0
0:5.6.1-2.azl3
fixed
prometheus-adapter
Azure Linux 3.0
0:0.12.0-2.azl3
fixed
CBL-Mariner 2.0
0:0.10.0-16.cm2
fixed
sriov-network-device-plugin
Azure Linux 3.0
0:3.7.0-2.azl3
fixed
CBL-Mariner 2.0
0:3.6.2-7.cm2
fixed
telegraf
Azure Linux 3.0
0:1.31.0-4.azl3
fixed
CBL-Mariner 2.0
0:1.29.4-10.cm2
fixed
terraform
CBL-Mariner 2.0
0:1.3.2-21.cm2
fixed
vitess
CBL-Mariner 2.0
0:17.0.7-3.cm2
fixed
Common Weakness Enumeration
References
https://go.dev/cl/637536
https://go.dev/issue/70906
https://groups.google.com/g/golang-announce/c/wSCRmFnNmPA/m/Lvcd0mRMAwAJ
https://pkg.go.dev/vuln/GO-2024-3333
https://security.netapp.com/advisory/ntap-20250221-0001/