UBUNTU-CVE-2024-24788
A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop.
02 / AFFECTED SOFTWARE
Affected packages
1 explicit affected versions
2 explicit affected versions
10 explicit affected versions
8 explicit affected versions
2 explicit affected versions
5 explicit affected versions
10 explicit affected versions
9 explicit affected versions
3 explicit affected versions
2 explicit affected versions
6 explicit affected versions
8 explicit affected versions
2 explicit affected versions
1 explicit affected versions
6 explicit affected versions
4 explicit affected versions
2 explicit affected versions
4 explicit affected versions
2 explicit affected versions
3 explicit affected versions
3 explicit affected versions
4 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop.
05 / REFERENCES
Further evidence
- https://github.com/golang/go/commit/93d8777d244962d1b706c0b695c8b72e9702577e
- https://github.com/golang/go/issues/66754
- https://go-review.googlesource.com/c/go/+/578375
- https://groups.google.com/g/golang-announce/c/wkkO4P9stm0
- https://ubuntu.com/security/CVE-2024-24788
- https://ubuntu.com/security/notices/USN-6886-1
- https://www.cve.org/CVERecord?id=CVE-2024-24788