CVE Vulnerabilities

CVE-2024-24788

Loop with Unreachable Exit Condition ('Infinite Loop')

Published: May 08, 2024 | Modified: Nov 21, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
7.5 MODERATE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Ubuntu
MEDIUM

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop.

Weakness

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

Affected Software

Name Vendor Start Version End Version
Builds for Red Hat OpenShift RedHat openshift-builds-waiters-container *
Cost Management for RHEL 8 RedHat costmanagement/costmanagement-metrics-operator-bundle:3.3.1-1 *
Cost Management for RHEL 8 RedHat costmanagement/costmanagement-metrics-rhel8-operator:3.3.1-1 *
Cryostat 3 on RHEL 8 RedHat cryostat-tech-preview/cryostat-db-rhel8:3.0.0-7 *
Cryostat 3 on RHEL 8 RedHat cryostat-tech-preview/cryostat-grafana-dashboard-rhel8:3.0.0-6 *
Cryostat 3 on RHEL 8 RedHat cryostat-tech-preview/cryostat-operator-bundle:3.0.0-6 *
Cryostat 3 on RHEL 8 RedHat cryostat-tech-preview/cryostat-ose-oauth-proxy-rhel8:3.0.0-7 *
Cryostat 3 on RHEL 8 RedHat cryostat-tech-preview/cryostat-reports-rhel8:3.0.0-6 *
Cryostat 3 on RHEL 8 RedHat cryostat-tech-preview/cryostat-rhel8:3.0.0-6 *
Cryostat 3 on RHEL 8 RedHat cryostat-tech-preview/cryostat-rhel8-operator:3.0.0-6 *
Cryostat 3 on RHEL 8 RedHat cryostat-tech-preview/cryostat-storage-rhel8:3.0.0-7 *
Cryostat 3 on RHEL 8 RedHat cryostat-tech-preview/jfr-datasource-rhel8:3.0.0-6 *
KDO-5.1-RHEL-9 RedHat kube-descheduler-operator/descheduler-rhel9:v5.1-17 *
KDO-5.1-RHEL-9 RedHat kube-descheduler-operator/kube-descheduler-operator-bundle:v5.1-16 *
KDO-5.1-RHEL-9 RedHat kube-descheduler-operator/kube-descheduler-rhel9-operator:v5.1-17 *
OADP-1.3-RHEL-9 RedHat oadp/oadp-velero-rhel9:1.3.3-8 *
Red Hat Ansible Automation Platform 2.4 for RHEL 8 RedHat receptor-0:1.4.8-1.1.el8ap *
Red Hat Ansible Automation Platform 2.4 for RHEL 9 RedHat receptor-0:1.4.8-1.1.el9ap *
Red Hat Enterprise Linux 8 RedHat grafana-0:9.2.10-17.el8_10 *
Red Hat Enterprise Linux 8 RedHat container-tools:rhel8-8100020240913121423.afee755d *
Red Hat Enterprise Linux 9 RedHat golang-0:1.21.10-1.el9_4 *
Red Hat Enterprise Linux 9 RedHat containernetworking-plugins-1:1.5.1-2.el9 *
Red Hat Enterprise Linux 9 RedHat skopeo-2:1.16.1-1.el9 *
Red Hat Enterprise Linux 9 RedHat grafana-0:10.2.6-4.el9 *
Red Hat Enterprise Linux 9 RedHat toolbox-0:0.0.99.5-5.el9 *
Red Hat Enterprise Linux 9 RedHat runc-4:1.1.13-4.el9 *
Red Hat Enterprise Linux 9 RedHat oci-seccomp-bpf-hook-0:1.2.10-2.el9 *
Red Hat Migration Toolkit for Containers 1.8 RedHat rhmtc/openshift-migration-registry-rhel8:v1.8.4-11 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift-clients-0:4.16.0-202407111006.p0.gfa84651.assembly.stream.el8 *
Red Hat OpenShift Container Platform 4.16 RedHat ose-aws-ecr-image-credential-provider-0:4.16.0-202407120242.p0.ga53e9de.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat ose-azure-acr-image-credential-provider-0:4.16.0-202407120242.p0.g0e95532.assembly.stream.el8 *
Red Hat OpenShift Container Platform 4.16 RedHat ose-gcp-gcr-image-credential-provider-0:4.16.0-202407120242.p0.g26b43df.assembly.stream.el8 *
Red Hat OpenShift Container Platform 4.16 RedHat skopeo-2:1.14.5-1.rhaos4.16.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/egress-router-cni-rhel9:v4.16.0-202407180206.p0.g7089efe.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/network-tools-rhel9:v4.16.0-202407150636.p0.g39eca10.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-agent-installer-api-server-rhel9:v4.16.0-202407181636.p0.g6b26a25.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-agent-installer-csr-approver-rhel9:v4.16.0-202407111006.p0.g373c87a.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-agent-installer-node-agent-rhel9:v4.16.0-202407180936.p0.g9ca7b58.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-agent-installer-utils-rhel9:v4.16.0-202407181636.p0.g6e6bb40.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-baremetal-installer-rhel9:v4.16.0-202407161206.p0.g41969e2.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-baremetal-rhel9-operator:v4.16.0-202407101906.p0.gf7a6e7f.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-cli-artifacts-rhel9:v4.16.0-202407111006.p0.gfa84651.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-cli-rhel9:v4.16.0-202407111006.p0.gfa84651.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-cloud-credential-rhel9-operator:v4.16.0-202407142206.p0.gfffc75d.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-cluster-ingress-rhel9-operator:v4.16.0-202407121806.p0.gaf5d3f6.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-cluster-kube-apiserver-rhel9-operator:v4.16.0-202407101906.p0.g0afad8a.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-cluster-monitoring-rhel9-operator:v4.16.0-202407121106.p0.gcb3d884.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-cluster-network-rhel9-operator:v4.16.0-202407101706.p0.gdc0ef57.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-cluster-node-tuning-rhel9-operator:v4.16.0-202407150636.p0.g2bd8891.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-cluster-version-rhel9-operator:v4.16.0-202407111837.p0.g49b0f18.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-console-rhel9:v4.16.0-202407181806.p0.g897c0f7.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-console-rhel9-operator:v4.16.0-202407111306.p0.g595d9d4.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-docker-builder-rhel9:v4.16.0-202407150135.p0.g3b7a1b1.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-hypershift-rhel9:v4.16.0-202407181636.p0.g5a87f94.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-ibm-vpc-block-csi-driver-rhel9:v4.16.0-202407101507.p0.g9571973.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-ibm-vpc-block-csi-driver-rhel9-operator:v4.16.0-202407110607.p0.g72d41aa.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-installer-altinfra-rhel9:v4.16.0-202407161206.p0.g41969e2.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-installer-artifacts-rhel9:v4.16.0-202407161505.p0.g41969e2.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-installer-rhel9:v4.16.0-202407161505.p0.g41969e2.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-ironic-machine-os-downloader-rhel9:v4.16.0-202407150135.p0.g93b8b5f.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-machine-config-rhel9-operator:v4.16.0-202407101706.p0.gd70a17f.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-must-gather-rhel9:v4.16.0-202407111006.p0.gaea114c.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-openshift-controller-manager-rhel9:v4.16.0-202407161940.p0.gf0536ca.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-operator-lifecycle-manager-rhel9:v4.16.0-202407171536.p0.g1551101.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-operator-registry-rhel9:v4.16.0-202407171536.p0.g1551101.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-ovn-kubernetes-rhel9:v4.16.0-202407111006.p0.g7f41283.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-prometheus-rhel9:v4.16.0-202407160436.p0.g54b1197.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-sdn-rhel9:v4.16.0-202407111006.p0.g5b658c4.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-tests-rhel9:v4.16.0-202407151406.p0.gac6867d.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-tools-rhel9:v4.16.0-202407150636.p0.gfa84651.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat redhat/redhat-operator-index:v4.16.0-202407171536.p0.g1551101.assembly.stream.el9 *
Red Hat OpenStack Services on OpenShift PODIFIED 1.0 RedHat rhoso-operators/barbican-rhel9-operator:1.0.4-4 *
Red Hat OpenStack Services on OpenShift PODIFIED 1.0 RedHat rhoso-operators/cinder-rhel9-operator:1.0.4-4 *
Red Hat OpenStack Services on OpenShift PODIFIED 1.0 RedHat rhoso-operators/designate-rhel9-operator:1.0.4-4 *
Red Hat OpenStack Services on OpenShift PODIFIED 1.0 RedHat rhoso-operators/glance-rhel9-operator:1.0.4-4 *
Red Hat OpenStack Services on OpenShift PODIFIED 1.0 RedHat rhoso-operators/heat-rhel9-operator:1.0.4-4 *
Red Hat OpenStack Services on OpenShift PODIFIED 1.0 RedHat rhoso-operators/horizon-rhel9-operator:1.0.4-4 *
Red Hat OpenStack Services on OpenShift PODIFIED 1.0 RedHat rhoso-operators/infra-rhel9-operator:1.0.4-4 *
Red Hat OpenStack Services on OpenShift PODIFIED 1.0 RedHat rhoso-operators/ironic-rhel9-operator:1.0.4-4 *
Red Hat OpenStack Services on OpenShift PODIFIED 1.0 RedHat rhoso-operators/keystone-rhel9-operator:1.0.4-4 *
Red Hat OpenStack Services on OpenShift PODIFIED 1.0 RedHat rhoso-operators/manila-rhel9-operator:1.0.4-4 *
Red Hat OpenStack Services on OpenShift PODIFIED 1.0 RedHat rhoso-operators/mariadb-rhel9-operator:1.0.4-4 *
Red Hat OpenStack Services on OpenShift PODIFIED 1.0 RedHat rhoso-operators/neutron-rhel9-operator:1.0.4-4 *
Red Hat OpenStack Services on OpenShift PODIFIED 1.0 RedHat rhoso-operators/nova-rhel9-operator:1.0.4-4 *
Red Hat OpenStack Services on OpenShift PODIFIED 1.0 RedHat rhoso-operators/octavia-rhel9-operator:1.0.4-4 *
Red Hat OpenStack Services on OpenShift PODIFIED 1.0 RedHat rhoso-operators/openstack-baremetal-agent-rhel9:1.0.4-4 *
Red Hat OpenStack Services on OpenShift PODIFIED 1.0 RedHat rhoso-operators/openstack-baremetal-rhel9-operator:1.0.4-4 *
Red Hat OpenStack Services on OpenShift PODIFIED 1.0 RedHat rhoso-operators/openstack-must-gather-rhel9:1.0.4-4 *
Red Hat OpenStack Services on OpenShift PODIFIED 1.0 RedHat rhoso-operators/openstack-rhel9-operator:1.0.4-6 *
Red Hat OpenStack Services on OpenShift PODIFIED 1.0 RedHat rhoso-operators/ovn-rhel9-operator:1.0.4-4 *
Red Hat OpenStack Services on OpenShift PODIFIED 1.0 RedHat rhoso-operators/placement-rhel9-operator:1.0.4-4 *
Red Hat OpenStack Services on OpenShift PODIFIED 1.0 RedHat rhoso-operators/rabbitmq-cluster-rhel9-operator:1.0.4-4 *
Red Hat OpenStack Services on OpenShift PODIFIED 1.0 RedHat rhoso-operators/sg-core-rhel9:1.0.4-4 *
Red Hat OpenStack Services on OpenShift PODIFIED 1.0 RedHat rhoso-operators/swift-rhel9-operator:1.0.4-4 *
Red Hat OpenStack Services on OpenShift PODIFIED 1.0 RedHat rhoso-operators/telemetry-rhel9-operator:1.0.4-4 *
Red Hat OpenStack Services on OpenShift PODIFIED 1.0 RedHat rhoso-operators/test-rhel9-operator:1.0.4-4 *
RHODF-4.16-RHEL-9 RedHat odf4/cephcsi-rhel9:v4.16.1-3 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/client-kn-rhel8:1.12.0-6 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8:1.12.0-7 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/eventing-controller-rhel8:1.12.0-7 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/eventing-in-memory-channel-controller-rhel8:1.12.0-7 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8:1.12.0-7 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/eventing-istio-controller-rhel8:1.12.0-5 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/eventing-kafka-broker-controller-rhel8:1.12.0-6 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/eventing-kafka-broker-dispatcher-rhel8:1.12.0-6 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/eventing-kafka-broker-post-install-rhel8:1.12.0-6 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/eventing-kafka-broker-receiver-rhel8:1.12.0-6 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/eventing-kafka-broker-webhook-rhel8:1.12.0-6 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/eventing-mtbroker-filter-rhel8:1.12.0-7 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/eventing-mtbroker-ingress-rhel8:1.12.0-7 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/eventing-mtchannel-broker-rhel8:1.12.0-7 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/eventing-mtping-rhel8:1.12.0-7 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/eventing-storage-version-migration-rhel8:1.12.0-7 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/eventing-webhook-rhel8:1.12.0-7 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/func-utils-rhel8:1.33.1-1 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/ingress-rhel8-operator:1.33.1-2 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/knative-rhel8-operator:1.33.1-2 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/kn-cli-artifacts-rhel8:1.12.0-6 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/kourier-control-rhel8:1.12.0-5 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/net-istio-controller-rhel8:1.12.0-5 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/net-istio-webhook-rhel8:1.12.0-5 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/serverless-operator-bundle:1.33.1-2 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/serverless-rhel8-operator:1.33.1-2 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/serving-activator-rhel8:1.12.0-5 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/serving-autoscaler-hpa-rhel8:1.12.0-5 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/serving-autoscaler-rhel8:1.12.0-5 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/serving-controller-rhel8:1.12.0-5 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/serving-queue-rhel8:1.12.0-5 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/serving-storage-version-migration-rhel8:1.12.0-5 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/serving-webhook-rhel8:1.12.0-5 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/svls-must-gather-rhel8:1.33.1-1 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1-tech-preview/backstage-plugins-eventmesh-rhel8:1.33.1-1 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1-tech-preview/knative-client-plugin-event-sender-rhel8:1.12.0-6 *
RODOO-1.2-RHEL-9 RedHat run-once-duration-override-operator/run-once-duration-override-operator-bundle:v1.2-7 *
RODOO-1.2-RHEL-9 RedHat run-once-duration-override-operator/run-once-duration-override-rhel9:v1.2-8 *
RODOO-1.2-RHEL-9 RedHat run-once-duration-override-operator/run-once-duration-override-rhel9-operator:v1.2-8 *
Builds for Red Hat OpenShift RedHat openshift-builds-controller-rhel9 *
Builds for Red Hat OpenShift RedHat openshift-builds-git-cloner-rhel9 *
Builds for Red Hat OpenShift RedHat openshift-builds-image-bundler-rhel9 *
Builds for Red Hat OpenShift RedHat openshift-builds-image-processing-rhel9 *
Builds for Red Hat OpenShift RedHat openshift-builds-operator-bundle *
Builds for Red Hat OpenShift RedHat openshift-builds-rhel9-operator *
Builds for Red Hat OpenShift RedHat openshift-builds-shared-resource-rhel9 *
Builds for Red Hat OpenShift RedHat openshift-builds-shared-resource-webhook-rhel9 *
Builds for Red Hat OpenShift RedHat openshift-builds-waiters-rhel9 *
Builds for Red Hat OpenShift RedHat openshift-builds-webhook-rhel9 *
Golang-1.10 Ubuntu trusty/esm *
Golang-1.20 Ubuntu mantic *
Golang-1.22 Ubuntu focal *
Golang-1.22 Ubuntu jammy *
Golang-1.22 Ubuntu mantic *
Golang-1.22 Ubuntu noble *

References