USN-6746-1 — google-guest-agent, google-osconfig-agent vulnerability

Summary

It was discovered that Google Guest Agent and Google OS Config Agent incorrectly
handled certain JSON files. An attacker could possibly use this issue to
cause a denial of service.

Fixed packages 2

Release	Package	Fixed in
Ubuntu · 22.04 LTS 22.04:LTS	google-guest-agent	20231004.02-0ubuntu1~22.04.4
Ubuntu · 22.04 LTS 22.04:LTS	google-osconfig-agent	20230504.00-0ubuntu1~22.04.1

Vulnerabilities 1

High 7.5

CVE-2024-24786

Infinite loop in JSON unmarshaling in google.golang.org/protobuf

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown opti…

google.golang.org/protobuf google.golang.org/protobuf/internal/encoding/json google.golang.org/protobuf/encoding/protojson katib-suggestion-hyperopt Debian Ubuntu Azure Linux Alpine Wolfi Go

Mar 5, 2024

References

report
https://ubuntu.com/security/CVE-2024-24786

google-guest-agent, google-osconfig-agent vulnerability

Summary

Fixed packages 2

Vulnerabilities 1

Infinite loop in JSON unmarshaling in google.golang.org/protobuf

References