MGASA-2026-0190

Advisory lineage Upstream: 1 Downstream: 0
Upstream
CVE-2024-45338
Published: 10 Jun 2026, 05:07
Last modified:10 Jun 2026, 05:15

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

10 Jun 2026, 05:07
Published
Vulnerability first disclosed
10 Jun 2026, 05:15
Last Modified
Vulnerability information updated

Description

Updated golang-x-net packages fix security vulnerability CVE-2024-45338 An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service.

Affected Systems

  • mageia•golang-x-net

    < 0.7.0-2.1.mga9

References (3)