1. Home
  2. Security Advisories
  3. Alpine Linux
  4. ALPINE:CVE-2024-24786

[ALPINE:CVE-2024-24786] buildah vulnerability

Affected Packages 8
Fixed Packages 8
CVEs 1
Info Packages Vulnerabilities

[From CVE-2024-24786] The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.

Package Affected Version
pkg:apk/alpine/buildah?arch=x86_64&distro=alpine-edge < 1.35.4-r0
pkg:apk/alpine/buildah?arch=x86&distro=alpine-edge < 1.35.4-r0
pkg:apk/alpine/buildah?arch=s390x&distro=alpine-edge < 1.35.4-r0
pkg:apk/alpine/buildah?arch=riscv64&distro=alpine-edge < 1.35.4-r0
pkg:apk/alpine/buildah?arch=ppc64le&distro=alpine-edge < 1.35.4-r0
pkg:apk/alpine/buildah?arch=armv7&distro=alpine-edge < 1.35.4-r0
pkg:apk/alpine/buildah?arch=armhf&distro=alpine-edge < 1.35.4-r0
pkg:apk/alpine/buildah?arch=aarch64&distro=alpine-edge < 1.35.4-r0
Package Fixed Version
pkg:apk/alpine/buildah?arch=x86_64&distro=alpine-edge = 1.35.4-r0
pkg:apk/alpine/buildah?arch=x86&distro=alpine-edge = 1.35.4-r0
pkg:apk/alpine/buildah?arch=s390x&distro=alpine-edge = 1.35.4-r0
pkg:apk/alpine/buildah?arch=riscv64&distro=alpine-edge = 1.35.4-r0
pkg:apk/alpine/buildah?arch=ppc64le&distro=alpine-edge = 1.35.4-r0
pkg:apk/alpine/buildah?arch=armv7&distro=alpine-edge = 1.35.4-r0
pkg:apk/alpine/buildah?arch=armhf&distro=alpine-edge = 1.35.4-r0
pkg:apk/alpine/buildah?arch=aarch64&distro=alpine-edge = 1.35.4-r0
ID
ALPINE:CVE-2024-24786
URL
https://security.alpinelinux.org/vuln/CVE-2024-24786
Published
2024-03-05T23:15:07
(6 months ago)
Modified
2024-03-05T23:15:07
(6 months ago)
Rights
Alpine Linux Security Team
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Fixed pkg:apk/alpine/buildah?arch=x86_64&distro=alpine-edge alpine buildah = 1.35.4-r0 alpine-edge x86_64
Affected pkg:apk/alpine/buildah?arch=x86_64&distro=alpine-edge alpine buildah < 1.35.4-r0 alpine-edge x86_64
Fixed pkg:apk/alpine/buildah?arch=x86&distro=alpine-edge alpine buildah = 1.35.4-r0 alpine-edge x86
Affected pkg:apk/alpine/buildah?arch=x86&distro=alpine-edge alpine buildah < 1.35.4-r0 alpine-edge x86
Fixed pkg:apk/alpine/buildah?arch=s390x&distro=alpine-edge alpine buildah = 1.35.4-r0 alpine-edge s390x
Affected pkg:apk/alpine/buildah?arch=s390x&distro=alpine-edge alpine buildah < 1.35.4-r0 alpine-edge s390x
Fixed pkg:apk/alpine/buildah?arch=riscv64&distro=alpine-edge alpine buildah = 1.35.4-r0 alpine-edge riscv64
Affected pkg:apk/alpine/buildah?arch=riscv64&distro=alpine-edge alpine buildah < 1.35.4-r0 alpine-edge riscv64
Fixed pkg:apk/alpine/buildah?arch=ppc64le&distro=alpine-edge alpine buildah = 1.35.4-r0 alpine-edge ppc64le
Affected pkg:apk/alpine/buildah?arch=ppc64le&distro=alpine-edge alpine buildah < 1.35.4-r0 alpine-edge ppc64le
Fixed pkg:apk/alpine/buildah?arch=armv7&distro=alpine-edge alpine buildah = 1.35.4-r0 alpine-edge armv7
Affected pkg:apk/alpine/buildah?arch=armv7&distro=alpine-edge alpine buildah < 1.35.4-r0 alpine-edge armv7
Fixed pkg:apk/alpine/buildah?arch=armhf&distro=alpine-edge alpine buildah = 1.35.4-r0 alpine-edge armhf
Affected pkg:apk/alpine/buildah?arch=armhf&distro=alpine-edge alpine buildah < 1.35.4-r0 alpine-edge armhf
Fixed pkg:apk/alpine/buildah?arch=aarch64&distro=alpine-edge alpine buildah = 1.35.4-r0 alpine-edge aarch64
Affected pkg:apk/alpine/buildah?arch=aarch64&distro=alpine-edge alpine buildah < 1.35.4-r0 alpine-edge aarch64
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date