Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hw7c-3rfg-p46j

Опубликовано: 14 мар. 2023
Источник: github
Github: Прошло ревью
CVSS3: 7.5

Описание

google.golang.org/protobuf vulnerable to panic leading to denial of service

Parsing invalid messages can panic.

Parsing a text-format message which contains a potential number consisting of a minus sign, one or more characters of whitespace, and no further input will cause a panic.

Пакеты

Наименование

google.golang.org/protobuf

go
Затронутые версииВерсия исправления

>= 1.29.0, < 1.29.1

1.29.1

EPSS

Процентиль: 58%
0.0037
Низкий

7.5 High

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 2 лет назад

Parsing invalid messages can panic. Parsing a text-format message which contains a potential number consisting of a minus sign, one or more characters of whitespace, and no further input will cause a panic.

CVSS3: 7.5
redhat
больше 2 лет назад

Parsing invalid messages can panic. Parsing a text-format message which contains a potential number consisting of a minus sign, one or more characters of whitespace, and no further input will cause a panic.

CVSS3: 7.5
nvd
больше 2 лет назад

Parsing invalid messages can panic. Parsing a text-format message which contains a potential number consisting of a minus sign, one or more characters of whitespace, and no further input will cause a panic.

CVSS3: 7.5
debian
больше 2 лет назад

Parsing invalid messages can panic. Parsing a text-format message whic ...

EPSS

Процентиль: 58%
0.0037
Низкий

7.5 High

CVSS3

Дефекты

CWE-125