CVE-2024-24788

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-835

Affected software

No affected versions have been published.

Timeline

Published
May 8, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-247895.5The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misaligCVE-2024-24793.5A vulnerability classified as problematic has been found in MHA Sistemas arMHAzena 9.6.0.0. This affects an unknown part of the component CaCVE-2024-247909.8The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses wCVE-2024-247917.5The net/http HTTP/1.1 client mishandled the case where a server responds to a request with an "Expect: 100-continue" header with a non-inforCVE-2024-247927.5Parsing a corrupt or malicious image with invalid color indices can cause a panic.CVE-2024-247939.8A use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imaging Data Commons libdicom 1.0.5. A specially crafteCVE-2024-247949.8A use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imaging Data Commons libdicom 1.0.5. A specially crafteCVE-2024-247956.3HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backendCVE-2024-247968.8Deserialization of Untrusted Data vulnerability in MagePeople Team Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently – WoCVE-2024-247979.8Deserialization of Untrusted Data vulnerability in G5Theme ERE Recently Viewed – Essential Real Estate Add-On.This issue affects ERE RecentlCVE-2024-247988.8Cross-Site Request Forgery (CSRF) vulnerability in SoniNow Team Debug.This issue affects Debug: from n/a through 1.10.CVE-2024-247998.8Missing Authorization vulnerability in WooCommerce WooCommerce Box Office.This issue affects WooCommerce Box Office: from n/a through 1.2.2.
CVE-2024-24788: Medium severity, CVSS 5.9 | Vulnix