Описание
Duplicate Advisory: rust-protobuf crate is vulnerable to Uncontrolled Recursion, potentially leading to DoS
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-2gh3-rmm4-6rq5. This link is maintained to preserve external references.
The protobuf crate before 3.7.2 for Rust allows uncontrolled recursion in the protobuf::coded_input_stream::CodedInputStream::skip_group parsing of unknown fields in untrusted input.
Пакеты
Наименование
protobuf
rust
Затронутые версииВерсия исправления
< 3.7.2
3.7.2
5.9 Medium
CVSS3
Дефекты
CWE-674
5.9 Medium
CVSS3
Дефекты
CWE-674