Description
A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Go standard library net
Default version status: unaffected
1.22.0-0 to < 1.22.3affected
References
- https://go.dev/issue/66754 ↗
- https://go.dev/cl/578375 ↗
- https://groups.google.com/g/golang-announce/c/wkkO4P9stm0 ↗
- https://pkg.go.dev/vuln/GO-2024-2824 ↗
- http://www.openwall.com/lists/oss-security/2024/05/08/3 ↗
- https://security.netapp.com/advisory/ntap-20240605-0002/ ↗
- https://security.netapp.com/advisory/ntap-20240614-0001/ ↗