CVE-2024-24788

Published: 8 May 2024

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop.

Notes

Packages built using golang need to be rebuilt once the
vulnerability has been fixed. This CVE entry does not
list packages that need rebuilding outside of the main
repository or the Ubuntu variants with PPA overlays.

Warning: do not include nullboot in the list of no-change
rebuilds after fixing an issue in golang.

Status

References

• https://www.cve.org/CVERecord?id=CVE-2024-24788
• https://groups.google.com/g/golang-announce/c/wkkO4P9stm0
• https://github.com/golang/go/issues/66754
• https://go-review.googlesource.com/c/go/+/578375
• NVD
• Launchpad
• Debian