tocsin

CVE-2024-32886

3 advisories.

Go/github.com/vitessio/vitess CVE-2024-32886: medium 4.9, EPSS 0.75%

Vitess vulnerable to infinite memory consumption and vtgate crash

Action: Upgrade github.com/vitessio/vitess to 17.0.7 or later.

go get github.com/vitessio/vitess@v19.0.4
go get github.com/vitessio/vitess@v18.0.5
go get github.com/vitessio/vitess@v17.0.7

Affected

introducedfixedlast affected
19.0.019.0.4-
18.0.018.0.5-
017.0.7-

Fixed versions

19.0.418.0.517.0.7

Sources

CVE-2024-32886 · published · modified · JSON

Go/vitess.io/vitess CVE-2024-32886: medium 4.9, EPSS 0.75%

Vitess vulnerable to infinite memory consumption and vtgate crash

Action: Upgrade vitess.io/vitess to 0.17.7 or later.

go get vitess.io/vitess@v0.17.7
go get vitess.io/vitess@v0.18.5
go get vitess.io/vitess@v0.19.4

Affected

introducedfixedlast affected
00.17.7-
0.18.00.18.5-
0.19.00.19.4-

Fixed versions

0.17.70.18.50.19.4

Sources

CVE-2024-32886 · published · modified · JSON

Go/vitess.io/vitess CVE-2024-32886: unknown, EPSS 0.75%

Denial of service attack by triggering unbounded memory usage in vitess.io/vitess

Action: Upgrade vitess.io/vitess to 0.17.7 or later.

go get vitess.io/vitess@v0.17.7
go get vitess.io/vitess@v0.18.5
go get vitess.io/vitess@v0.19.4

Affected

introducedfixedlast affected
00.17.7-
0.18.00.18.5-
0.19.00.19.4-

Fixed versions

0.17.70.18.50.19.4

Sources

CVE-2024-32886 · published · modified · JSON