Stack exhaustion in Parse in go/build/constraint
CVE-2024-34158 is a vulnerability involving stack exhaustion in the Parse function within the go/build/constraint package. The issue is categorized under CWE-674, which relates to uncontrolled recursion leading to resource exhaustion. The vulnerability affects certain versions of Microsoft-related software including versions 2.0 and 3.0, as well as Azure Linux and CBL Mariner 2.0. No CVSS score or detailed impact information is provided, and there are no known exploits in the wild. No patch or remediation guidance is currently available from the vendor.
AI Analysis
Technical Summary
This vulnerability, CVE-2024-34158, concerns a stack exhaustion condition in the Parse function of the go/build/constraint package used by Microsoft products. The flaw is classified as CWE-674, indicating that uncontrolled recursion or excessive stack usage can lead to exhaustion of stack memory. Affected products include Microsoft software versions 2.0 and 3.0, Azure Linux, and CBL Mariner 2.0. The vendor has not provided a patch or detailed advisory information, and no exploit activity has been reported.
Potential Impact
The vulnerability could potentially allow an attacker to cause a denial of service by exhausting the stack through the Parse function. However, no specific impact details or exploitation reports are available. Without further information, the exact consequences remain unclear.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or mitigation instructions have been provided by Microsoft Security Response Center at this time.
Stack exhaustion in Parse in go/build/constraint
Description
CVE-2024-34158 is a vulnerability involving stack exhaustion in the Parse function within the go/build/constraint package. The issue is categorized under CWE-674, which relates to uncontrolled recursion leading to resource exhaustion. The vulnerability affects certain versions of Microsoft-related software including versions 2.0 and 3.0, as well as Azure Linux and CBL Mariner 2.0. No CVSS score or detailed impact information is provided, and there are no known exploits in the wild. No patch or remediation guidance is currently available from the vendor.
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability, CVE-2024-34158, concerns a stack exhaustion condition in the Parse function of the go/build/constraint package used by Microsoft products. The flaw is classified as CWE-674, indicating that uncontrolled recursion or excessive stack usage can lead to exhaustion of stack memory. Affected products include Microsoft software versions 2.0 and 3.0, Azure Linux, and CBL Mariner 2.0. The vendor has not provided a patch or detailed advisory information, and no exploit activity has been reported.
Potential Impact
The vulnerability could potentially allow an attacker to cause a denial of service by exhausting the stack through the Parse function. However, no specific impact details or exploitation reports are available. Without further information, the exact consequences remain unclear.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or mitigation instructions have been provided by Microsoft Security Response Center at this time.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_vex
- Csaf Version
- 2.0
- Publisher
- Microsoft Security Response Center
- Advisory Id
- msrc_CVE-2024-34158
- Cve Count
- 1
Threat ID: 6a998f66acd9273b4919349c
Added to database: 09/03/2026, 15:16:54 UTC
Last enriched: 09/07/2026, 19:27:26 UTC
Last updated: 09/10/2026, 19:36:48 UTC
Views: 9
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.