FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

go -- net: malformed DNS message can cause infinite loop

Affected packages
go122 < 1.22.3
go121 < 1.21.10

Details

VuXML ID d3847eba-114b-11ef-9c21-901b0e9408dc
Discovery 2024-04-25
Entry 2024-05-13

The Go project reports:

net: malformed DNS message can cause infinite loop

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop.

References

CVE Name CVE-2024-24788
URL https://go.dev/issue/66754