The vulnerability CVE-2024-55565 affects the nanoid library, mishandling fractional (non-integer) input values. In browser environments, this causes an infinite loop; in Node.js environments, it causes fractional pool offsets leading to zeroed outputs or buffer allocation errors. This results in denial of service through resource exhaustion or application failure. The issue is present in Red Hat Ceph Storage container images based on Ceph 9.0 and ubi9 base images. Red Hat has released new container images to address this issue, but no explicit patch details are provided. The vulnerability is classified under CWE-835 (Infinite Loop) and impacts system availability.

The vulnerability can cause denial of service by infinite looping or resource exhaustion, impacting system availability. There is no indication of confidentiality or integrity impact. No known exploits in the wild have been reported. The issue affects the nanoid component used within Red Hat Ceph Storage container images, potentially causing application failures or degraded performance.

Red Hat has released updated container images based on Ceph 9.0 and ubi9 base images that address this vulnerability. Users should pull and deploy the updated container images from the Red Hat container registry using the "podman pull" command. No other specific mitigations are documented. Patch status is not explicitly confirmed as a traditional patch but updated container images serve as the remediation. Check the Red Hat advisory for the latest guidance.