LIN1022-10677 : Security Advisory - go - CVE-2024-34155
Created: Aug 29, 2024
Updated: Mar 5, 2025
Resolved Date: Feb 27, 2025
Found In Version: 10.22.33.1
Fix Version: 10.22.33.20
Severity: Standard
Applicable for: Wind River Linux LTS 22
Component/s: Userspace
Description
Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion.
https://nvd.nist.gov/vuln/detail/CVE-2024-34155
