一、漏洞信息

漏洞编号：[CVE-2024-34156](https://nvd.nist.gov/vuln/detail/CVE-2024-34156)

漏洞归属组件：[golang](https://gitee.com/src-openeuler/golang)

漏洞归属的版本：1.13.15,1.15.7,1.17.3,1.19.4,1.20.5,1.20.7,1.21.4

CVSS V2.0分值：

BaseScore：0.0 None

Vector：CVSS：2.0/

漏洞简述：

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

漏洞公开时间：2024-09-07 05:15:12

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-34156

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.golang.org | https://go.dev/cl/611239 | |

| security.golang.org | https://go.dev/issue/69139 | |

| security.golang.org | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | |

| security.golang.org | https://pkg.go.dev/vuln/GO-2024-3106 | |

| debian | | https://security-tracker.debian.org/tracker/CVE-2024-34156 |

一、漏洞信息

漏洞编号：[CVE-2024-34156](https://nvd.nist.gov/vuln/detail/CVE-2024-34156)

漏洞归属组件：[golang](https://gitee.com/src-openeuler/golang)

漏洞归属的版本：1.13.15,1.15.7,1.17.3,1.19.4,1.20.5,1.20.7,1.21.4

CVSS V2.0分值：

BaseScore：0.0 None

Vector：CVSS：2.0/

漏洞简述：

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

漏洞公开时间：2024-09-07 05:15:12

漏洞创建时间：2024-09-07 13:24:35

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-34156

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.golang.org | https://go.dev/cl/611239 | |

| security.golang.org | https://go.dev/issue/69139 | |

| security.golang.org | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | |

| security.golang.org | https://pkg.go.dev/vuln/GO-2024-3106 | |

| debian | | https://security-tracker.debian.org/tracker/CVE-2024-34156 |

| go | https://go.dev/cl/611239 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| go | https://go.dev/issue/69139 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| go | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(1.21.4):

2.openEuler-20.03-LTS-SP4(1.15.7):

3.openEuler-22.03-LTS-SP1(1.17.3):

4.openEuler-22.03-LTS-SP3(1.17.3):

5.openEuler-22.03-LTS-SP4(1.17.3):

6.openEuler-24.03-LTS(1.21.4):

7.openEuler-24.03-LTS-Next(1.21.4):

修复是否涉及abi变化(是/否)：

1.master(1.21.4):

2.openEuler-20.03-LTS-SP4(1.15.7):

3.openEuler-22.03-LTS-SP1(1.17.3):

4.openEuler-22.03-LTS-SP3(1.17.3):

5.openEuler-22.03-LTS-SP4(1.17.3):

6.openEuler-24.03-LTS(1.21.4):

7.openEuler-24.03-LTS-Next(1.21.4):

一、漏洞信息

漏洞编号：[CVE-2024-34156](https://nvd.nist.gov/vuln/detail/CVE-2024-34156)

漏洞归属组件：[golang](https://gitee.com/src-openeuler/golang)

漏洞归属的版本：1.13.15,1.15.7,1.17.3,1.19.4,1.20.5,1.20.7,1.21.4

CVSS V2.0分值：

BaseScore：0.0 None

Vector：CVSS：2.0/

漏洞简述：

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

漏洞公开时间：2024-09-07 05:15:12

漏洞创建时间：2024-09-07 13:24:35

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-34156

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.golang.org | https://go.dev/cl/611239 | |

| security.golang.org | https://go.dev/issue/69139 | |

| security.golang.org | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | |

| security.golang.org | https://pkg.go.dev/vuln/GO-2024-3106 | |

| debian | | https://security-tracker.debian.org/tracker/CVE-2024-34156 |

一、漏洞信息

漏洞编号：[CVE-2024-34156](https://nvd.nist.gov/vuln/detail/CVE-2024-34156)

漏洞归属组件：[golang](https://gitee.com/src-openeuler/golang)

漏洞归属的版本：1.13.15,1.15.7,1.17.3,1.19.4,1.20.5,1.20.7,1.21.4

CVSS V2.0分值：

BaseScore：0.0 None

Vector：CVSS：2.0/

漏洞简述：

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

漏洞公开时间：2024-09-07 05:15:12

漏洞创建时间：2024-09-07 13:24:35

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-34156

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.golang.org | https://go.dev/cl/611239 | |

| security.golang.org | https://go.dev/issue/69139 | |

| security.golang.org | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | |

| security.golang.org | https://pkg.go.dev/vuln/GO-2024-3106 | |

</details>

一、漏洞信息

漏洞编号：[CVE-2024-34156](https://nvd.nist.gov/vuln/detail/CVE-2024-34156)

漏洞归属组件：[golang](https://gitee.com/src-openeuler/golang)

漏洞归属的版本：1.13.15,1.15.7,1.17.3,1.19.4,1.20.5,1.20.7,1.21.4

CVSS V2.0分值：

BaseScore：0.0 None

Vector：CVSS：2.0/

漏洞简述：

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

漏洞公开时间：2024-09-07 05:15:12

漏洞创建时间：2024-09-07 13:24:35

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-34156

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.golang.org | https://go.dev/cl/611239 | |

| security.golang.org | https://go.dev/issue/69139 | |

| security.golang.org | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | |

| security.golang.org | https://pkg.go.dev/vuln/GO-2024-3106 | |

</details>

一、漏洞信息

漏洞编号：[CVE-2024-34156](https://nvd.nist.gov/vuln/detail/CVE-2024-34156)

漏洞归属组件：[golang](https://gitee.com/src-openeuler/golang)

漏洞归属的版本：1.13.15,1.15.7,1.17.3,1.19.4,1.20.5,1.20.7,1.21.4

CVSS V2.0分值：

BaseScore：0.0 None

Vector：CVSS：2.0/

漏洞简述：

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

漏洞公开时间：2024-09-07 05:15:12

漏洞创建时间：2024-09-07 13:24:35

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-34156

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.golang.org | https://go.dev/cl/611239 | |

| security.golang.org | https://go.dev/issue/69139 | |

| security.golang.org | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | |

| security.golang.org | https://pkg.go.dev/vuln/GO-2024-3106 | |

</details>

一、漏洞信息

漏洞编号：[CVE-2024-34156](https://nvd.nist.gov/vuln/detail/CVE-2024-34156)

漏洞归属组件：[golang](https://gitee.com/src-openeuler/golang)

漏洞归属的版本：1.13.15,1.15.7,1.17.3,1.19.4,1.20.5,1.20.7,1.21.4

CVSS V2.0分值：

BaseScore：0.0 None

Vector：CVSS：2.0/

漏洞简述：

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

漏洞公开时间：2024-09-07 05:15:12

漏洞创建时间：2024-09-07 13:24:35

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-34156

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.golang.org | https://go.dev/cl/611239 | |

| security.golang.org | https://go.dev/issue/69139 | |

| security.golang.org | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | |

| security.golang.org | https://pkg.go.dev/vuln/GO-2024-3106 | |

一、漏洞信息

漏洞编号：[CVE-2024-34156](https://nvd.nist.gov/vuln/detail/CVE-2024-34156)

漏洞归属组件：[golang](https://gitee.com/src-openeuler/golang)

漏洞归属的版本：1.13.15,1.15.7,1.17.3,1.19.4,1.20.5,1.20.7,1.21.4

CVSS V2.0分值：

BaseScore：0.0 None

Vector：CVSS：2.0/

漏洞简述：

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

漏洞公开时间：2024-09-07 05:15:12

漏洞创建时间：2024-09-07 13:24:35

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-34156

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.golang.org | https://go.dev/cl/611239 | |

| security.golang.org | https://go.dev/issue/69139 | |

| security.golang.org | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | |

| security.golang.org | https://pkg.go.dev/vuln/GO-2024-3106 | |

| debian | | https://security-tracker.debian.org/tracker/CVE-2024-34156 |

| cve_search | | https://go.dev/cl/611239 |

| cve_search | | https://go.dev/issue/69139 |

| cve_search | | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk |

| cve_search | | https://pkg.go.dev/vuln/GO-2024-3106 |

| go | https://go.dev/cl/611239 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| go | https://go.dev/issue/69139 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| go | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| amazon_linux_explore | https://access.redhat.com/security/cve/CVE-2024-34156 | https://explore.alas.aws.amazon.com/CVE-2024-34156.html |

| amazon_linux_explore | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34156 | https://explore.alas.aws.amazon.com/CVE-2024-34156.html |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(1.21.4):

2.openEuler-20.03-LTS-SP4(1.15.7):

3.openEuler-22.03-LTS-SP1(1.17.3):

4.openEuler-22.03-LTS-SP3(1.17.3):

5.openEuler-22.03-LTS-SP4(1.17.3):

6.openEuler-24.03-LTS(1.21.4):

7.openEuler-24.03-LTS-Next(1.21.4):

修复是否涉及abi变化(是/否)：

1.master(1.21.4):

2.openEuler-20.03-LTS-SP4(1.15.7):

3.openEuler-22.03-LTS-SP1(1.17.3):

4.openEuler-22.03-LTS-SP3(1.17.3):

5.openEuler-22.03-LTS-SP4(1.17.3):

6.openEuler-24.03-LTS(1.21.4):

7.openEuler-24.03-LTS-Next(1.21.4):

一、漏洞信息

漏洞编号：[CVE-2024-34156](https://nvd.nist.gov/vuln/detail/CVE-2024-34156)

漏洞归属组件：[golang](https://gitee.com/src-openeuler/golang)

漏洞归属的版本：1.13.15,1.15.7,1.17.3,1.19.4,1.20.5,1.20.7,1.21.4

CVSS V2.0分值：

BaseScore：0.0 None

Vector：CVSS：2.0/

漏洞简述：

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

漏洞公开时间：2024-09-07 05:15:12

漏洞创建时间：2024-09-07 13:24:35

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-34156

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.golang.org | https://go.dev/cl/611239 | |

| security.golang.org | https://go.dev/issue/69139 | |

| security.golang.org | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | |

| security.golang.org | https://pkg.go.dev/vuln/GO-2024-3106 | |

| debian | | https://security-tracker.debian.org/tracker/CVE-2024-34156 |

| cve_search | | https://go.dev/cl/611239 |

| cve_search | | https://go.dev/issue/69139 |

| cve_search | | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk |

| cve_search | | https://pkg.go.dev/vuln/GO-2024-3106 |

| go | https://go.dev/cl/611239 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| go | https://go.dev/issue/69139 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| go | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| amazon_linux_explore | https://access.redhat.com/security/cve/CVE-2024-34156 | https://explore.alas.aws.amazon.com/CVE-2024-34156.html |

| amazon_linux_explore | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34156 | https://explore.alas.aws.amazon.com/CVE-2024-34156.html |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(1.21.4):

2.openEuler-20.03-LTS-SP4(1.15.7):

3.openEuler-22.03-LTS-SP1(1.17.3):

4.openEuler-22.03-LTS-SP3(1.17.3):

5.openEuler-22.03-LTS-SP4(1.17.3):

6.openEuler-24.03-LTS(1.21.4):

7.openEuler-24.03-LTS-Next(1.21.4):

修复是否涉及abi变化(是/否)：

1.master(1.21.4):

2.openEuler-20.03-LTS-SP4(1.15.7):

3.openEuler-22.03-LTS-SP1(1.17.3):

4.openEuler-22.03-LTS-SP3(1.17.3):

5.openEuler-22.03-LTS-SP4(1.17.3):

6.openEuler-24.03-LTS(1.21.4):

7.openEuler-24.03-LTS-Next(1.21.4):

一、漏洞信息

漏洞编号：[CVE-2024-34156](https://nvd.nist.gov/vuln/detail/CVE-2024-34156)

漏洞归属组件：[golang](https://gitee.com/src-openeuler/golang)

漏洞归属的版本：1.13.15,1.15.7,1.17.3,1.19.4,1.20.5,1.20.7,1.21.4

CVSS V2.0分值：

BaseScore：0.0 None

Vector：CVSS：2.0/

漏洞简述：

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

漏洞公开时间：2024-09-07 05:15:12

漏洞创建时间：2024-09-07 13:24:35

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-34156

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.golang.org | https://go.dev/cl/611239 | |

| security.golang.org | https://go.dev/issue/69139 | |

| security.golang.org | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | |

| security.golang.org | https://pkg.go.dev/vuln/GO-2024-3106 | |

| debian | | https://security-tracker.debian.org/tracker/CVE-2024-34156 |

| cve_search | | https://go.dev/cl/611239 |

| cve_search | | https://go.dev/issue/69139 |

| cve_search | | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk |

| cve_search | | https://pkg.go.dev/vuln/GO-2024-3106 |

| go | https://go.dev/cl/611239 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| go | https://go.dev/issue/69139 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| go | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| amazon_linux_explore | https://access.redhat.com/security/cve/CVE-2024-34156 | https://explore.alas.aws.amazon.com/CVE-2024-34156.html |

| amazon_linux_explore | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34156 | https://explore.alas.aws.amazon.com/CVE-2024-34156.html |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(1.21.4):

2.openEuler-20.03-LTS-SP4(1.15.7):

3.openEuler-22.03-LTS-SP1(1.17.3):

4.openEuler-22.03-LTS-SP3(1.17.3):

5.openEuler-22.03-LTS-SP4(1.17.3):

6.openEuler-24.03-LTS(1.21.4):

7.openEuler-24.03-LTS-Next(1.21.4):

修复是否涉及abi变化(是/否)：

1.master(1.21.4):

2.openEuler-20.03-LTS-SP4(1.15.7):

3.openEuler-22.03-LTS-SP1(1.17.3):

4.openEuler-22.03-LTS-SP3(1.17.3):

5.openEuler-22.03-LTS-SP4(1.17.3):

6.openEuler-24.03-LTS(1.21.4):

7.openEuler-24.03-LTS-Next(1.21.4):

一、漏洞信息

漏洞编号：[CVE-2024-34156](https://nvd.nist.gov/vuln/detail/CVE-2024-34156)

漏洞归属组件：[golang](https://gitee.com/src-openeuler/golang)

漏洞归属的版本：1.13.15,1.15.7,1.17.3,1.19.4,1.20.5,1.20.7,1.21.4

CVSS V2.0分值：

BaseScore：0.0 None

Vector：CVSS：2.0/

漏洞简述：

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

漏洞公开时间：2024-09-07 05:15:12

漏洞创建时间：2024-09-07 13:24:35

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-34156

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.golang.org | https://go.dev/cl/611239 | |

| security.golang.org | https://go.dev/issue/69139 | |

| security.golang.org | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | |

| security.golang.org | https://pkg.go.dev/vuln/GO-2024-3106 | |

| debian | | https://security-tracker.debian.org/tracker/CVE-2024-34156 |

| cve_search | | https://go.dev/cl/611239 |

| cve_search | | https://go.dev/issue/69139 |

| cve_search | | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk |

| cve_search | | https://pkg.go.dev/vuln/GO-2024-3106 |

| go | https://go.dev/cl/611239 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| go | https://go.dev/issue/69139 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| go | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| amazon_linux_explore | https://access.redhat.com/security/cve/CVE-2024-34156 | https://explore.alas.aws.amazon.com/CVE-2024-34156.html |

| amazon_linux_explore | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34156 | https://explore.alas.aws.amazon.com/CVE-2024-34156.html |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(1.21.4):

2.openEuler-20.03-LTS-SP4(1.15.7):

3.openEuler-22.03-LTS-SP1(1.17.3):

4.openEuler-22.03-LTS-SP3(1.17.3):

5.openEuler-22.03-LTS-SP4(1.17.3):

6.openEuler-24.03-LTS(1.21.4):

7.openEuler-24.03-LTS-Next(1.21.4):

修复是否涉及abi变化(是/否)：

1.master(1.21.4):

2.openEuler-20.03-LTS-SP4(1.15.7):

3.openEuler-22.03-LTS-SP1(1.17.3):

4.openEuler-22.03-LTS-SP3(1.17.3):

5.openEuler-22.03-LTS-SP4(1.17.3):

6.openEuler-24.03-LTS(1.21.4):

7.openEuler-24.03-LTS-Next(1.21.4):

一、漏洞信息

漏洞编号：[CVE-2024-34156](https://nvd.nist.gov/vuln/detail/CVE-2024-34156)

漏洞归属组件：[golang](https://gitee.com/src-openeuler/golang)

漏洞归属的版本：1.13.15,1.15.7,1.17.3,1.19.4,1.20.5,1.20.7,1.21.4

CVSS V2.0分值：

BaseScore：0.0 None

Vector：CVSS：2.0/

漏洞简述：

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

漏洞公开时间：2024-09-07 05:15:12

漏洞创建时间：2024-09-07 13:24:35

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-34156

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.golang.org | https://go.dev/cl/611239 | |

| security.golang.org | https://go.dev/issue/69139 | |

| security.golang.org | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | |

| security.golang.org | https://pkg.go.dev/vuln/GO-2024-3106 | |

| debian | | https://security-tracker.debian.org/tracker/CVE-2024-34156 |

| cve_search | | https://go.dev/cl/611239 |

| cve_search | | https://go.dev/issue/69139 |

| cve_search | | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk |

| cve_search | | https://pkg.go.dev/vuln/GO-2024-3106 |

| go | https://go.dev/cl/611239 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| go | https://go.dev/issue/69139 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| go | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| amazon_linux_explore | https://access.redhat.com/security/cve/CVE-2024-34156 | https://explore.alas.aws.amazon.com/CVE-2024-34156.html |

| amazon_linux_explore | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34156 | https://explore.alas.aws.amazon.com/CVE-2024-34156.html |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(1.21.4):

2.openEuler-20.03-LTS-SP4(1.15.7):

3.openEuler-22.03-LTS-SP1(1.17.3):

4.openEuler-22.03-LTS-SP3(1.17.3):

5.openEuler-22.03-LTS-SP4(1.17.3):

6.openEuler-24.03-LTS(1.21.4):

7.openEuler-24.03-LTS-Next(1.21.4):

修复是否涉及abi变化(是/否)：

1.master(1.21.4):

2.openEuler-20.03-LTS-SP4(1.15.7):

3.openEuler-22.03-LTS-SP1(1.17.3):

4.openEuler-22.03-LTS-SP3(1.17.3):

5.openEuler-22.03-LTS-SP4(1.17.3):

6.openEuler-24.03-LTS(1.21.4):

7.openEuler-24.03-LTS-Next(1.21.4):

一、漏洞信息

漏洞编号：[CVE-2024-34156](https://nvd.nist.gov/vuln/detail/CVE-2024-34156)

漏洞归属组件：[golang](https://gitee.com/src-openeuler/golang)

漏洞归属的版本：1.13.15,1.15.7,1.17.3,1.19.4,1.20.5,1.20.7,1.21.4

CVSS V2.0分值：

BaseScore：0.0 None

Vector：CVSS：2.0/

漏洞简述：

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

漏洞公开时间：2024-09-07 05:15:12

漏洞创建时间：2024-09-07 13:24:35

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-34156

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.golang.org | https://go.dev/cl/611239 | |

| security.golang.org | https://go.dev/issue/69139 | |

| security.golang.org | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | |

| security.golang.org | https://pkg.go.dev/vuln/GO-2024-3106 | |

| debian | | https://security-tracker.debian.org/tracker/CVE-2024-34156 |

| cve_search | | https://go.dev/cl/611239 |

| cve_search | | https://go.dev/issue/69139 |

| cve_search | | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk |

| cve_search | | https://pkg.go.dev/vuln/GO-2024-3106 |

| go | https://go.dev/cl/611239 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| go | https://go.dev/issue/69139 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| go | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| amazon_linux_explore | https://access.redhat.com/security/cve/CVE-2024-34156 | https://explore.alas.aws.amazon.com/CVE-2024-34156.html |

| amazon_linux_explore | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34156 | https://explore.alas.aws.amazon.com/CVE-2024-34156.html |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

一、漏洞信息

漏洞编号：[CVE-2024-34156](https://nvd.nist.gov/vuln/detail/CVE-2024-34156)

漏洞归属组件：[golang](https://gitee.com/src-openeuler/golang)

漏洞归属的版本：1.13.15,1.15.7,1.17.3,1.19.4,1.20.5,1.20.7,1.21.4

CVSS V2.0分值：

BaseScore：0.0 None

Vector：CVSS：2.0/

漏洞简述：

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

漏洞公开时间：2024-09-07 05:15:12

漏洞创建时间：2024-09-07 13:24:35

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-34156

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.golang.org | https://go.dev/cl/611239 | |

| security.golang.org | https://go.dev/issue/69139 | |

| security.golang.org | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | |

| security.golang.org | https://pkg.go.dev/vuln/GO-2024-3106 | |

| debian | | https://security-tracker.debian.org/tracker/CVE-2024-34156 |

| cve_search | | https://go.dev/cl/611239 |

| cve_search | | https://go.dev/issue/69139 |

| cve_search | | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk |

| cve_search | | https://pkg.go.dev/vuln/GO-2024-3106 |

| go | https://go.dev/cl/611239 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| go | https://go.dev/issue/69139 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| go | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| amazon_linux_explore | https://access.redhat.com/security/cve/CVE-2024-34156 | https://explore.alas.aws.amazon.com/CVE-2024-34156.html |

| amazon_linux_explore | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34156 | https://explore.alas.aws.amazon.com/CVE-2024-34156.html |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

0.0

Vector：CVSS：2.0/None

受影响版本排查(受影响/不受影响)：

1.master(1.21.4):受影响

2.openEuler-20.03-LTS-SP4(1.15.7):受影响

3.openEuler-22.03-LTS-SP1(1.17.3):受影响

4.openEuler-22.03-LTS-SP3(1.17.3):受影响

5.openEuler-22.03-LTS-SP4(1.17.3):受影响

6.openEuler-24.03-LTS(1.21.4):受影响

7.openEuler-24.03-LTS-Next(1.21.4):受影响

修复是否涉及abi变化(是/否)：

1.master(1.21.4):否

2.openEuler-20.03-LTS-SP4(1.15.7):否

3.openEuler-22.03-LTS-SP1(1.17.3):否

4.openEuler-22.03-LTS-SP3(1.17.3):否

5.openEuler-22.03-LTS-SP4(1.17.3):否

6.openEuler-24.03-LTS(1.21.4):否

7.openEuler-24.03-LTS-Next(1.21.4):否

一、漏洞信息

漏洞编号：[CVE-2024-34156](https://nvd.nist.gov/vuln/detail/CVE-2024-34156)

漏洞归属组件：[golang](https://gitee.com/src-openeuler/golang)

漏洞归属的版本：1.13.15,1.15.7,1.17.3,1.19.4,1.20.5,1.20.7,1.21.4

CVSS V2.0分值：

BaseScore：0.0 None

Vector：CVSS：2.0/

漏洞简述：

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

漏洞公开时间：2024-09-07 05:15:12

漏洞创建时间：2024-09-07 13:24:35

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-34156

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.golang.org | https://go.dev/cl/611239 | |

| security.golang.org | https://go.dev/issue/69139 | |

| security.golang.org | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | |

| security.golang.org | https://pkg.go.dev/vuln/GO-2024-3106 | |

| debian | | https://security-tracker.debian.org/tracker/CVE-2024-34156 |

| cve_search | | https://go.dev/cl/611239 |

| cve_search | | https://go.dev/issue/69139 |

| cve_search | | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk |

| cve_search | | https://pkg.go.dev/vuln/GO-2024-3106 |

| go | https://go.dev/cl/611239 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| go | https://go.dev/issue/69139 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| go | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| amazon_linux_explore | https://access.redhat.com/security/cve/CVE-2024-34156 | https://explore.alas.aws.amazon.com/CVE-2024-34156.html |

| amazon_linux_explore | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34156 | https://explore.alas.aws.amazon.com/CVE-2024-34156.html |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

0.0

Vector：CVSS：2.0/None

受影响版本排查(受影响/不受影响)：

1.master(1.21.4):受影响

2.openEuler-20.03-LTS-SP4(1.15.7):受影响

3.openEuler-22.03-LTS-SP1(1.17.3):受影响

4.openEuler-22.03-LTS-SP3(1.17.3):受影响

5.openEuler-22.03-LTS-SP4(1.17.3):受影响

6.openEuler-24.03-LTS(1.21.4):受影响

7.openEuler-24.03-LTS-Next(1.21.4):受影响

修复是否涉及abi变化(是/否)：

1.master(1.21.4):否

2.openEuler-20.03-LTS-SP4(1.15.7):否

3.openEuler-22.03-LTS-SP1(1.17.3):否

4.openEuler-22.03-LTS-SP3(1.17.3):否

5.openEuler-22.03-LTS-SP4(1.17.3):否

6.openEuler-24.03-LTS(1.21.4):否

7.openEuler-24.03-LTS-Next(1.21.4):否

一、漏洞信息

漏洞编号：[CVE-2024-34156](https://nvd.nist.gov/vuln/detail/CVE-2024-34156)

漏洞归属组件：[golang](https://gitee.com/src-openeuler/golang)

漏洞归属的版本：1.13.15,1.15.7,1.17.3,1.19.4,1.20.5,1.20.7,1.21.4

CVSS V2.0分值：

BaseScore：0.0 None

Vector：CVSS：2.0/

漏洞简述：

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

漏洞公开时间：2024-09-07 05:15:12

漏洞创建时间：2024-09-07 13:24:35

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-34156

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.golang.org | https://go.dev/cl/611239 | |

| security.golang.org | https://go.dev/issue/69139 | |

| security.golang.org | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | |

| security.golang.org | https://pkg.go.dev/vuln/GO-2024-3106 | |

| debian | | https://security-tracker.debian.org/tracker/CVE-2024-34156 |

| cve_search | | https://go.dev/cl/611239 |

| cve_search | | https://go.dev/issue/69139 |

| cve_search | | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk |

| cve_search | | https://pkg.go.dev/vuln/GO-2024-3106 |

| go | https://go.dev/cl/611239 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| go | https://go.dev/issue/69139 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| go | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| amazon_linux_explore | https://access.redhat.com/security/cve/CVE-2024-34156 | https://explore.alas.aws.amazon.com/CVE-2024-34156.html |

| amazon_linux_explore | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34156 | https://explore.alas.aws.amazon.com/CVE-2024-34156.html |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

0.0

Vector：CVSS：2.0/None

受影响版本排查(受影响/不受影响)：

1.master(1.21.4):受影响

2.openEuler-20.03-LTS-SP4(1.15.7):受影响

3.openEuler-22.03-LTS-SP1(1.17.3):受影响

4.openEuler-22.03-LTS-SP3(1.17.3):受影响

5.openEuler-22.03-LTS-SP4(1.17.3):受影响

6.openEuler-24.03-LTS(1.21.4):受影响

7.openEuler-24.03-LTS-Next(1.21.4):受影响

修复是否涉及abi变化(是/否)：

1.master(1.21.4):否

2.openEuler-20.03-LTS-SP4(1.15.7):否

3.openEuler-22.03-LTS-SP1(1.17.3):否

4.openEuler-22.03-LTS-SP3(1.17.3):否

5.openEuler-22.03-LTS-SP4(1.17.3):否

6.openEuler-24.03-LTS(1.21.4):否

7.openEuler-24.03-LTS-Next(1.21.4):否

一、漏洞信息

漏洞编号：[CVE-2024-34156](https://nvd.nist.gov/vuln/detail/CVE-2024-34156)

漏洞归属组件：[golang](https://gitee.com/src-openeuler/golang)

漏洞归属的版本：1.13.15,1.15.7,1.17.3,1.19.4,1.20.5,1.20.7,1.21.4

CVSS V2.0分值：

BaseScore：0.0 None

Vector：CVSS：2.0/

漏洞简述：

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

漏洞公开时间：2024-09-07 05:15:12

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-34156

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.golang.org | https://go.dev/cl/611239 | |

| security.golang.org | https://go.dev/issue/69139 | |

| security.golang.org | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | |

| security.golang.org | https://pkg.go.dev/vuln/GO-2024-3106 | |

一、漏洞信息

漏洞编号：[CVE-2024-34156](https://nvd.nist.gov/vuln/detail/CVE-2024-34156)

漏洞归属组件：[golang](https://gitee.com/src-openeuler/golang)

漏洞归属的版本：1.13.15,1.15.7,1.17.3,1.19.4,1.20.5,1.20.7,1.21.4

CVSS V2.0分值：

BaseScore：0.0 None

Vector：CVSS：2.0/

漏洞简述：

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

漏洞公开时间：2024-09-07 05:15:12

漏洞创建时间：2024-09-24 10:15:01

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-34156

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.golang.org | https://go.dev/cl/611239 | |

| security.golang.org | https://go.dev/issue/69139 | |

| security.golang.org | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | |

| security.golang.org | https://pkg.go.dev/vuln/GO-2024-3106 | |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6914 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6908 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6913 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6912 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

一、漏洞信息

漏洞编号：[CVE-2024-34156](https://nvd.nist.gov/vuln/detail/CVE-2024-34156)

漏洞归属组件：[golang](https://gitee.com/src-openeuler/golang)

漏洞归属的版本：1.13.15,1.15.7,1.17.3,1.19.4,1.20.5,1.20.7,1.21.4

CVSS V2.0分值：

BaseScore：0.0 None

Vector：CVSS：2.0/

漏洞简述：

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

漏洞公开时间：2024-09-07 05:15:12

漏洞创建时间：2024-09-24 10:15:01

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-34156

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.golang.org | https://go.dev/cl/611239 | |

| security.golang.org | https://go.dev/issue/69139 | |

| security.golang.org | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | |

| security.golang.org | https://pkg.go.dev/vuln/GO-2024-3106 | |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6914 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6908 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6913 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6912 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6946 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6947 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2024-34156 |

| anolis | | https://anas.openanolis.cn/cves/detail/CVE-2024-34156 |

| cve_search | | https://go.dev/cl/611239 |

| cve_search | | https://go.dev/issue/69139 |

| cve_search | | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk |

| cve_search | | https://pkg.go.dev/vuln/GO-2024-3106 |

| go | https://go.dev/cl/611239 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| go | https://go.dev/issue/69139 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| go | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| amazon_linux_explore | https://access.redhat.com/security/cve/CVE-2024-34156 | https://explore.alas.aws.amazon.com/CVE-2024-34156.html |

| amazon_linux_explore | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34156 | https://explore.alas.aws.amazon.com/CVE-2024-34156.html |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(1.21.4):受影响

2.openEuler-20.03-LTS-SP4(1.15.7):受影响

3.openEuler-22.03-LTS-SP1(1.17.3):受影响

4.openEuler-22.03-LTS-SP3(1.17.3):受影响

5.openEuler-22.03-LTS-SP4(1.17.3):受影响

6.openEuler-24.03-LTS(1.21.4):受影响

7.openEuler-24.03-LTS-Next(1.21.4):受影响

修复是否涉及abi变化(是/否)：

1.master(1.21.4):否

2.openEuler-20.03-LTS-SP4(1.15.7):否

3.openEuler-22.03-LTS-SP1(1.17.3):否

4.openEuler-22.03-LTS-SP3(1.17.3):否

5.openEuler-22.03-LTS-SP4(1.17.3):否

6.openEuler-24.03-LTS(1.21.4):否

7.openEuler-24.03-LTS-Next(1.21.4):否

一、漏洞信息

漏洞编号：[CVE-2024-34156](https://nvd.nist.gov/vuln/detail/CVE-2024-34156)

漏洞归属组件：[golang](https://gitee.com/src-openeuler/golang)

漏洞归属的版本：1.13.15,1.15.7,1.17.3,1.19.4,1.20.5,1.20.7,1.21.4

CVSS V2.0分值：

BaseScore：0.0 None

Vector：CVSS：2.0/

漏洞简述：

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

漏洞公开时间：2024-09-07 05:15:12

漏洞创建时间：2024-09-24 10:15:01

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-34156

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.golang.org | https://go.dev/cl/611239 | |

| security.golang.org | https://go.dev/issue/69139 | |

| security.golang.org | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | |

| security.golang.org | https://pkg.go.dev/vuln/GO-2024-3106 | |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6914 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6908 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6913 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6912 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6946 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6947 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

一、漏洞信息

漏洞编号：[CVE-2024-34156](https://nvd.nist.gov/vuln/detail/CVE-2024-34156)

漏洞归属组件：[golang](https://gitee.com/src-openeuler/golang)

漏洞归属的版本：1.13.15,1.15.7,1.17.3,1.19.4,1.20.5,1.20.7,1.21.4

CVSS V2.0分值：

BaseScore：0.0 None

Vector：CVSS：2.0/

漏洞简述：

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

漏洞公开时间：2024-09-07 05:15:12

漏洞创建时间：2024-09-24 10:15:01

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-34156

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.golang.org | https://go.dev/cl/611239 | |

| security.golang.org | https://go.dev/issue/69139 | |

| security.golang.org | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | |

| security.golang.org | https://pkg.go.dev/vuln/GO-2024-3106 | |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6914 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6908 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6913 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6912 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6946 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6947 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7102 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7103 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7135 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7136 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

一、漏洞信息

漏洞编号：[CVE-2024-34156](https://nvd.nist.gov/vuln/detail/CVE-2024-34156)

漏洞归属组件：[golang](https://gitee.com/src-openeuler/golang)

漏洞归属的版本：1.13.15,1.15.7,1.17.3,1.19.4,1.20.5,1.20.7,1.21.4

CVSS V2.0分值：

BaseScore：0.0 None

Vector：CVSS：2.0/

漏洞简述：

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

漏洞公开时间：2024-09-07 05:15:12

漏洞创建时间：2024-09-24 10:15:01

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-34156

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.golang.org | https://go.dev/cl/611239 | |

| security.golang.org | https://go.dev/issue/69139 | |

| security.golang.org | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | |

| security.golang.org | https://pkg.go.dev/vuln/GO-2024-3106 | |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6914 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6908 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6913 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6912 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6946 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6947 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7102 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7103 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7135 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7136 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7202 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7208 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7205 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7204 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7207 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7206 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7203 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7261 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7262 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2024-34156 |

| anolis | | https://anas.openanolis.cn/cves/detail/CVE-2024-34156 |

| cve_search | | https://go.dev/cl/611239 |

| cve_search | | https://go.dev/issue/69139 |

| cve_search | | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk |

| cve_search | | https://pkg.go.dev/vuln/GO-2024-3106 |

| go | https://go.dev/cl/611239 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| go | https://go.dev/issue/69139 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| go | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| amazon_linux_explore | https://access.redhat.com/security/cve/CVE-2024-34156 | https://explore.alas.aws.amazon.com/CVE-2024-34156.html |

| amazon_linux_explore | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34156 | https://explore.alas.aws.amazon.com/CVE-2024-34156.html |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(1.21.4):受影响

2.openEuler-20.03-LTS-SP4(1.15.7):受影响

3.openEuler-22.03-LTS-SP1(1.17.3):受影响

4.openEuler-22.03-LTS-SP3(1.17.3):受影响

5.openEuler-22.03-LTS-SP4(1.17.3):受影响

6.openEuler-24.03-LTS(1.21.4):受影响

7.openEuler-24.03-LTS-Next(1.21.4):受影响

修复是否涉及abi变化(是/否)：

1.master(1.21.4):否

2.openEuler-20.03-LTS-SP4(1.15.7):否

3.openEuler-22.03-LTS-SP1(1.17.3):否

4.openEuler-22.03-LTS-SP3(1.17.3):否

5.openEuler-22.03-LTS-SP4(1.17.3):否

6.openEuler-24.03-LTS(1.21.4):否

7.openEuler-24.03-LTS-Next(1.21.4):否

一、漏洞信息

漏洞编号：[CVE-2024-34156](https://nvd.nist.gov/vuln/detail/CVE-2024-34156)

漏洞归属组件：[golang](https://gitee.com/src-openeuler/golang)

漏洞归属的版本：1.13.15,1.15.7,1.17.3,1.19.4,1.20.5,1.20.7,1.21.4

CVSS V2.0分值：

BaseScore：0.0 None

Vector：CVSS：2.0/

漏洞简述：

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

漏洞公开时间：2024-09-07 05:15:12

漏洞创建时间：2024-09-24 10:15:01

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-34156

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.golang.org | https://go.dev/cl/611239 | |

| security.golang.org | https://go.dev/issue/69139 | |

| security.golang.org | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | |

| security.golang.org | https://pkg.go.dev/vuln/GO-2024-3106 | |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6914 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6908 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6913 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6912 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6946 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6947 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7102 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7103 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7135 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7136 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7202 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7208 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7205 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7204 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7207 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7206 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7203 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7261 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7262 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2024-34156 |

| anolis | | https://anas.openanolis.cn/cves/detail/CVE-2024-34156 |

| cve_search | | https://go.dev/cl/611239 |

| cve_search | | https://go.dev/issue/69139 |

| cve_search | | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk |

| cve_search | | https://pkg.go.dev/vuln/GO-2024-3106 |

| go | https://go.dev/cl/611239 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| go | https://go.dev/issue/69139 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| go | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| amazon_linux_explore | https://access.redhat.com/security/cve/CVE-2024-34156 | https://explore.alas.aws.amazon.com/CVE-2024-34156.html |

| amazon_linux_explore | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34156 | https://explore.alas.aws.amazon.com/CVE-2024-34156.html |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(1.21.4):受影响

2.openEuler-20.03-LTS-SP4(1.15.7):受影响

3.openEuler-22.03-LTS-SP1(1.17.3):受影响

4.openEuler-22.03-LTS-SP3(1.17.3):受影响

5.openEuler-22.03-LTS-SP4(1.17.3):受影响

6.openEuler-24.03-LTS(1.21.4):受影响

7.openEuler-24.03-LTS-Next(1.21.4):受影响

修复是否涉及abi变化(是/否)：

1.master(1.21.4):否

2.openEuler-20.03-LTS-SP4(1.15.7):否

3.openEuler-22.03-LTS-SP1(1.17.3):否

4.openEuler-22.03-LTS-SP3(1.17.3):否

5.openEuler-22.03-LTS-SP4(1.17.3):否

6.openEuler-24.03-LTS(1.21.4):否

7.openEuler-24.03-LTS-Next(1.21.4):否

一、漏洞信息

漏洞编号：[CVE-2024-34156](https://nvd.nist.gov/vuln/detail/CVE-2024-34156)

漏洞归属组件：[golang](https://gitee.com/src-openeuler/golang)

漏洞归属的版本：1.13.15,1.15.7,1.17.3,1.19.4,1.20.5,1.20.7,1.21.4

CVSS V2.0分值：

BaseScore：0.0 None

Vector：CVSS：2.0/

漏洞简述：

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

漏洞公开时间：2024-09-07 05:15:12

漏洞创建时间：2024-09-24 10:15:01

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-34156

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.golang.org | https://go.dev/cl/611239 | |

| security.golang.org | https://go.dev/issue/69139 | |

| security.golang.org | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | |

| security.golang.org | https://pkg.go.dev/vuln/GO-2024-3106 | |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6914 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6908 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6913 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6912 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6946 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6947 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7102 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7103 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7135 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7136 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7202 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7208 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7205 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7204 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7207 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7206 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7203 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7261 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7262 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

一、漏洞信息

漏洞编号：[CVE-2024-34156](https://nvd.nist.gov/vuln/detail/CVE-2024-34156)

漏洞归属组件：[golang](https://gitee.com/src-openeuler/golang)

漏洞归属的版本：1.13.15,1.15.7,1.17.3,1.19.4,1.20.5,1.20.7,1.21.4

CVSS V2.0分值：

BaseScore：0.0 None

Vector：CVSS：2.0/

漏洞简述：

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

漏洞公开时间：2024-09-07 05:15:12

漏洞创建时间：2024-09-24 10:15:01

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-34156

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.golang.org | https://go.dev/cl/611239 | |

| security.golang.org | https://go.dev/issue/69139 | |

| security.golang.org | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | |

| security.golang.org | https://pkg.go.dev/vuln/GO-2024-3106 | |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6914 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6908 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6913 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6912 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6946 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6947 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7102 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7103 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7135 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7136 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7202 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7208 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7205 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7204 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7207 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7206 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7203 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7261 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7262 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7351 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7350 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2024-34156 |

| anolis | | https://anas.openanolis.cn/cves/detail/CVE-2024-34156 |

| cve_search | | https://go.dev/cl/611239 |

| cve_search | | https://go.dev/issue/69139 |

| cve_search | | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk |

| cve_search | | https://pkg.go.dev/vuln/GO-2024-3106 |

| go | https://go.dev/cl/611239 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| go | https://go.dev/issue/69139 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| go | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| amazon_linux_explore | https://access.redhat.com/security/cve/CVE-2024-34156 | https://explore.alas.aws.amazon.com/CVE-2024-34156.html |

| amazon_linux_explore | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34156 | https://explore.alas.aws.amazon.com/CVE-2024-34156.html |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(1.21.4):受影响

2.openEuler-20.03-LTS-SP4(1.15.7):受影响

3.openEuler-22.03-LTS-SP1(1.17.3):受影响

4.openEuler-22.03-LTS-SP3(1.17.3):受影响

5.openEuler-22.03-LTS-SP4(1.17.3):受影响

6.openEuler-24.03-LTS(1.21.4):受影响

7.openEuler-24.03-LTS-Next(1.21.4):受影响

修复是否涉及abi变化(是/否)：

1.master(1.21.4):否

2.openEuler-20.03-LTS-SP4(1.15.7):否

3.openEuler-22.03-LTS-SP1(1.17.3):否

4.openEuler-22.03-LTS-SP3(1.17.3):否

5.openEuler-22.03-LTS-SP4(1.17.3):否

6.openEuler-24.03-LTS(1.21.4):否

7.openEuler-24.03-LTS-Next(1.21.4):否

一、漏洞信息

漏洞编号：[CVE-2024-34156](https://nvd.nist.gov/vuln/detail/CVE-2024-34156)

漏洞归属组件：[golang](https://gitee.com/src-openeuler/golang)

漏洞归属的版本：1.13.15,1.15.7,1.17.3,1.19.4,1.20.5,1.20.7,1.21.4

CVSS V2.0分值：

BaseScore：0.0 None

Vector：CVSS：2.0/

漏洞简述：

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

漏洞公开时间：2024-09-07 05:15:12

漏洞创建时间：2024-09-24 10:15:01

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-34156

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.golang.org | https://go.dev/cl/611239 | |

| security.golang.org | https://go.dev/issue/69139 | |

| security.golang.org | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | |

| security.golang.org | https://pkg.go.dev/vuln/GO-2024-3106 | |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6914 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6908 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6913 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6912 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6946 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6947 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7102 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7103 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7135 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7136 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7202 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7208 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7205 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7204 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7207 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7206 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7203 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7261 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7262 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7351 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7350 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

一、漏洞信息

漏洞编号：[CVE-2024-34156](https://nvd.nist.gov/vuln/detail/CVE-2024-34156)

漏洞归属组件：[golang](https://gitee.com/src-openeuler/golang)

漏洞归属的版本：1.13.15,1.15.7,1.17.3,1.19.4,1.20.5,1.20.7,1.21.4

CVSS V2.0分值：

BaseScore：0.0 None

Vector：CVSS：2.0/

漏洞简述：

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

漏洞公开时间：2024-09-07 05:15:12

漏洞创建时间：2024-09-24 10:15:01

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-34156

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.golang.org | https://go.dev/cl/611239 | |

| security.golang.org | https://go.dev/issue/69139 | |

| security.golang.org | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | |

| security.golang.org | https://pkg.go.dev/vuln/GO-2024-3106 | |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6914 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6908 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6913 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6912 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6946 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6947 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7102 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7103 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7135 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7136 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7202 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7208 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7205 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7204 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7207 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7206 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7203 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7261 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7262 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7351 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7350 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7449 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7455 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7456 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2024-34156 |

| anolis | | https://anas.openanolis.cn/cves/detail/CVE-2024-34156 |

| cve_search | | https://go.dev/cl/611239 |

| cve_search | | https://go.dev/issue/69139 |

| cve_search | | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk |

| cve_search | | https://pkg.go.dev/vuln/GO-2024-3106 |

| go | https://go.dev/cl/611239 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| go | https://go.dev/issue/69139 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| go | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| amazon_linux_explore | https://access.redhat.com/security/cve/CVE-2024-34156 | https://explore.alas.aws.amazon.com/CVE-2024-34156.html |

| amazon_linux_explore | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34156 | https://explore.alas.aws.amazon.com/CVE-2024-34156.html |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(1.21.4):受影响

2.openEuler-20.03-LTS-SP4(1.15.7):受影响

3.openEuler-22.03-LTS-SP1(1.17.3):受影响

4.openEuler-22.03-LTS-SP3(1.17.3):受影响

5.openEuler-22.03-LTS-SP4(1.17.3):受影响

6.openEuler-24.03-LTS(1.21.4):受影响

7.openEuler-24.03-LTS-Next(1.21.4):受影响

修复是否涉及abi变化(是/否)：

1.master(1.21.4):否

2.openEuler-20.03-LTS-SP4(1.15.7):否

3.openEuler-22.03-LTS-SP1(1.17.3):否

4.openEuler-22.03-LTS-SP3(1.17.3):否

5.openEuler-22.03-LTS-SP4(1.17.3):否

6.openEuler-24.03-LTS(1.21.4):否

7.openEuler-24.03-LTS-Next(1.21.4):否

一、漏洞信息

漏洞编号：[CVE-2024-34156](https://nvd.nist.gov/vuln/detail/CVE-2024-34156)

漏洞归属组件：[golang](https://gitee.com/src-openeuler/golang)

漏洞归属的版本：1.13.15,1.15.7,1.17.3,1.19.4,1.20.5,1.20.7,1.21.4

CVSS V2.0分值：

BaseScore：0.0 None

Vector：CVSS：2.0/

漏洞简述：

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

漏洞公开时间：2024-09-07 05:15:12

漏洞创建时间：2024-09-24 10:15:01

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-34156

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.golang.org | https://go.dev/cl/611239 | |

| security.golang.org | https://go.dev/issue/69139 | |

| security.golang.org | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | |

| security.golang.org | https://pkg.go.dev/vuln/GO-2024-3106 | |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6914 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6908 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6913 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6912 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6946 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6947 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7102 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7103 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7135 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7136 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7202 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7208 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7205 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7204 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7207 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7206 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7203 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7261 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7262 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7351 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7350 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7449 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7455 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7456 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2024-34156 |

| anolis | | https://anas.openanolis.cn/cves/detail/CVE-2024-34156 |

| cve_search | | https://go.dev/cl/611239 |

| cve_search | | https://go.dev/issue/69139 |

| cve_search | | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk |

| cve_search | | https://pkg.go.dev/vuln/GO-2024-3106 |

| go | https://go.dev/cl/611239 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| go | https://go.dev/issue/69139 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| go | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| amazon_linux_explore | https://access.redhat.com/security/cve/CVE-2024-34156 | https://explore.alas.aws.amazon.com/CVE-2024-34156.html |

| amazon_linux_explore | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34156 | https://explore.alas.aws.amazon.com/CVE-2024-34156.html |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(1.21.4):受影响

2.openEuler-20.03-LTS-SP4(1.15.7):受影响

3.openEuler-22.03-LTS-SP1(1.17.3):受影响

4.openEuler-22.03-LTS-SP3(1.17.3):受影响

5.openEuler-22.03-LTS-SP4(1.17.3):受影响

6.openEuler-24.03-LTS(1.21.4):受影响

7.openEuler-24.03-LTS-Next(1.21.4):受影响

修复是否涉及abi变化(是/否)：

1.master(1.21.4):否

2.openEuler-20.03-LTS-SP4(1.15.7):否

3.openEuler-22.03-LTS-SP1(1.17.3):否

4.openEuler-22.03-LTS-SP3(1.17.3):否

5.openEuler-22.03-LTS-SP4(1.17.3):否

6.openEuler-24.03-LTS(1.21.4):否

7.openEuler-24.03-LTS-Next(1.21.4):否

一、漏洞信息

漏洞编号：[CVE-2024-34156](https://nvd.nist.gov/vuln/detail/CVE-2024-34156)

漏洞归属组件：[golang](https://gitee.com/src-openeuler/golang)

漏洞归属的版本：1.13.15,1.15.7,1.17.3,1.19.4,1.20.5,1.20.7,1.21.4

CVSS V2.0分值：

BaseScore：0.0 None

Vector：CVSS：2.0/

漏洞简述：

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

漏洞公开时间：2024-09-07 05:15:12

漏洞创建时间：2024-09-24 10:15:01

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-34156

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.golang.org | https://go.dev/cl/611239 | |

| security.golang.org | https://go.dev/issue/69139 | |

| security.golang.org | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | |

| security.golang.org | https://pkg.go.dev/vuln/GO-2024-3106 | |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6914 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6908 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6913 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6912 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6946 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6947 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7102 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7103 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7135 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7136 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7202 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7208 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7205 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7204 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7207 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7206 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7203 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7261 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7262 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7351 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7350 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7449 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7455 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7456 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2024-34156 |

| anolis | | https://anas.openanolis.cn/cves/detail/CVE-2024-34156 |

| cve_search | | https://go.dev/cl/611239 |

| cve_search | | https://go.dev/issue/69139 |

| cve_search | | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk |

| cve_search | | https://pkg.go.dev/vuln/GO-2024-3106 |

| go | https://go.dev/cl/611239 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| go | https://go.dev/issue/69139 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| go | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| amazon_linux_explore | https://access.redhat.com/security/cve/CVE-2024-34156 | https://explore.alas.aws.amazon.com/CVE-2024-34156.html |

| amazon_linux_explore | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34156 | https://explore.alas.aws.amazon.com/CVE-2024-34156.html |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(1.21.4):受影响

2.openEuler-20.03-LTS-SP4(1.15.7):受影响

3.openEuler-22.03-LTS-SP1(1.17.3):受影响

4.openEuler-22.03-LTS-SP3(1.17.3):受影响

5.openEuler-22.03-LTS-SP4(1.17.3):受影响

6.openEuler-24.03-LTS(1.21.4):受影响

7.openEuler-24.03-LTS-Next(1.21.4):受影响

修复是否涉及abi变化(是/否)：

1.master(1.21.4):否

2.openEuler-20.03-LTS-SP4(1.15.7):否

3.openEuler-22.03-LTS-SP1(1.17.3):否

4.openEuler-22.03-LTS-SP3(1.17.3):否

5.openEuler-22.03-LTS-SP4(1.17.3):否

6.openEuler-24.03-LTS(1.21.4):否

7.openEuler-24.03-LTS-Next(1.21.4):否

一、漏洞信息

漏洞编号：[CVE-2024-34156](https://nvd.nist.gov/vuln/detail/CVE-2024-34156)

漏洞归属组件：[golang](https://gitee.com/src-openeuler/golang)

漏洞归属的版本：1.13.15,1.15.7,1.17.3,1.19.4,1.20.5,1.20.7,1.21.4

CVSS V2.0分值：

BaseScore：0.0 None

Vector：CVSS：2.0/

漏洞简述：

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

漏洞公开时间：2024-09-07 05:15:12

漏洞创建时间：2024-09-24 10:15:01

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-34156

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.golang.org | https://go.dev/cl/611239 | |

| security.golang.org | https://go.dev/issue/69139 | |

| security.golang.org | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | |

| security.golang.org | https://pkg.go.dev/vuln/GO-2024-3106 | |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6914 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6908 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6913 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6912 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6946 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6947 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7102 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7103 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7135 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7136 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7202 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7208 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7205 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7204 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7207 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7206 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7203 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7261 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7262 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7351 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7350 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7449 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7455 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7456 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2024-34156 |

| anolis | | https://anas.openanolis.cn/cves/detail/CVE-2024-34156 |

| cve_search | | https://go.dev/cl/611239 |

| cve_search | | https://go.dev/issue/69139 |

| cve_search | | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk |

| cve_search | | https://pkg.go.dev/vuln/GO-2024-3106 |

| go | https://go.dev/cl/611239 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| go | https://go.dev/issue/69139 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| go | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| amazon_linux_explore | https://access.redhat.com/security/cve/CVE-2024-34156 | https://explore.alas.aws.amazon.com/CVE-2024-34156.html |

| amazon_linux_explore | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34156 | https://explore.alas.aws.amazon.com/CVE-2024-34156.html |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(1.21.4):受影响

2.openEuler-20.03-LTS-SP4(1.15.7):受影响

3.openEuler-22.03-LTS-SP1(1.17.3):受影响

4.openEuler-22.03-LTS-SP3(1.17.3):受影响

5.openEuler-22.03-LTS-SP4(1.17.3):受影响

6.openEuler-24.03-LTS(1.21.4):受影响

7.openEuler-24.03-LTS-Next(1.21.4):受影响

修复是否涉及abi变化(是/否)：

1.master(1.21.4):否

2.openEuler-20.03-LTS-SP4(1.15.7):否

3.openEuler-22.03-LTS-SP1(1.17.3):否

4.openEuler-22.03-LTS-SP3(1.17.3):否

5.openEuler-22.03-LTS-SP4(1.17.3):否

6.openEuler-24.03-LTS(1.21.4):否

7.openEuler-24.03-LTS-Next(1.21.4):否

一、漏洞信息

漏洞编号：[CVE-2024-34156](https://nvd.nist.gov/vuln/detail/CVE-2024-34156)

漏洞归属组件：[golang](https://gitee.com/src-openeuler/golang)

漏洞归属的版本：1.13.15,1.15.7,1.17.3,1.19.4,1.20.5,1.20.7,1.21.4

CVSS V2.0分值：

BaseScore：0.0 None

Vector：CVSS：2.0/

漏洞简述：

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

漏洞公开时间：2024-09-07 05:15:12

漏洞创建时间：2024-09-24 10:15:01

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-34156

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.golang.org | https://go.dev/cl/611239 | |

| security.golang.org | https://go.dev/issue/69139 | |

| security.golang.org | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | |

| security.golang.org | https://pkg.go.dev/vuln/GO-2024-3106 | |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6914 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6908 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6913 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6912 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6946 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:6947 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7102 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7103 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7135 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7136 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7202 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7208 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7205 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7204 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7207 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7206 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7203 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7261 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7262 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7351 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7350 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7449 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7455 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| redhat_bugzilla | https://access.redhat.com/errata/RHSA-2024:7456 | https://bugzilla.redhat.com/show_bug.cgi?id=2310528 |

| debian | | https://security-tracker.debian.org/tracker/CVE-2024-34156 |

| anolis | | https://anas.openanolis.cn/cves/detail/CVE-2024-34156 |

| cve_search | | https://go.dev/cl/611239 |

| cve_search | | https://go.dev/issue/69139 |

| cve_search | | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk |

| cve_search | | https://pkg.go.dev/vuln/GO-2024-3106 |

| go | https://go.dev/cl/611239 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| go | https://go.dev/issue/69139 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| go | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3106.yaml |

| amazon_linux_explore | https://access.redhat.com/security/cve/CVE-2024-34156 | https://explore.alas.aws.amazon.com/CVE-2024-34156.html |

| amazon_linux_explore | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34156 | https://explore.alas.aws.amazon.com/CVE-2024-34156.html |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(1.21.4):受影响

2.openEuler-20.03-LTS-SP4(1.15.7):受影响

3.openEuler-22.03-LTS-SP1(1.17.3):受影响

4.openEuler-22.03-LTS-SP3(1.17.3):受影响

5.openEuler-22.03-LTS-SP4(1.17.3):受影响

6.openEuler-24.03-LTS(1.21.4):受影响

7.openEuler-24.03-LTS-Next(1.21.4):受影响

修复是否涉及abi变化(是/否)：

1.master(1.21.4):否

2.openEuler-20.03-LTS-SP4(1.15.7):否

3.openEuler-22.03-LTS-SP1(1.17.3):否

4.openEuler-22.03-LTS-SP3(1.17.3):否

5.openEuler-22.03-LTS-SP4(1.17.3):否

6.openEuler-24.03-LTS(1.21.4):否

7.openEuler-24.03-LTS-Next(1.21.4):否

一、漏洞信息

漏洞编号：[CVE-2024-34156](https://nvd.nist.gov/vuln/detail/CVE-2024-34156)

漏洞归属组件：[golang](https://gitee.com/src-openeuler/golang)

漏洞归属的版本：1.13.15,1.15.7,1.17.3,1.19.4,1.20.5,1.20.7,1.21.4

CVSS V2.0分值：

BaseScore：0.0 None

Vector：CVSS：2.0/

漏洞简述：

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

漏洞公开时间：2024-09-07 05:15:12

漏洞创建时间：2024-09-24 10:15:01

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-34156

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| security.golang.org | https://go.dev/cl/611239 | |

| security.golang.org | https://go.dev/issue/69139 | |

| security.golang.org | https://groups.google.com/g/golang-dev/c/S9POB9NCTdk | |