5.9
Medium
CVE-2024-24788 A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop
Description
A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| net 1.22 | 1.22.0-0 → < 1.22.3 | 1.22.3 |
References
- go.dev go.dev
- go.dev go.dev
- groups.google.com groups.google.com
- pkg.go.dev pkg.go.dev
- www.openwall.com www.openwall.com
- security.netapp.com security.netapp.com
- security.netapp.com security.netapp.com
Timeline
- Published
- Last modified
Other CVEs of net
The 4 CVEs of net →
CVE-2026-46600
Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer
7.5
High
CVE-2026-33811
When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a…
7.5
High
CVE-2026-39836
The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL (0)
7.5
High