CVE-2024-24788: Go Standard Library Net

Medium severity, CVSS 5.9. EPSS: 1% chance of exploitation in the next 30 days.

A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop.

Affected products

• Go Standard Library Net: from 1.22.0-0, before 1.22.3 (fixed in 1.22.3)

Published 2024-05-08. Last modified 2026-06-17.