Описание
Any project that uses Protobuf Pure-Python backend to parse untrusted Protocol Buffers data containing an arbitrary number of recursive groups, recursive messages or a series of SGROUP tags can be corrupted by exceeding the Python recursion limit. This can result in a Denial of service by crashing the application with a RecursionError. We recommend upgrading to version =>6.31.1 or beyond commit 17838beda2943d08b8a9d4df5b68f5f04f26d901
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 3.21.12-11ubuntu1 |
| esm-infra-legacy/trusty | ignored | changes too intrusive |
| esm-infra/bionic | released | 3.0.0-9.1ubuntu1.1+esm3 |
| esm-infra/focal | released | 3.6.1.3-2ubuntu5.2+esm2 |
| esm-infra/xenial | released | 2.6.1-1.3ubuntu0.1~esm4 |
| jammy | released | 3.12.4-1ubuntu7.22.04.4 |
| noble | released | 3.21.12-8.2ubuntu0.2 |
| oracular | ignored | end of life |
| plucky | released | 3.21.12-10ubuntu0.1 |
| upstream | released | 6.31.1 |
Показывать по
EPSS
5.3 Medium
CVSS3
Связанные уязвимости
Any project that uses Protobuf Pure-Python backend to parse untrusted Protocol Buffers data containing an arbitrary number of recursive groups, recursive messages or a series of SGROUP tags can be corrupted by exceeding the Python recursion limit. This can result in a Denial of service by crashing the application with a RecursionError. We recommend upgrading to version =>6.31.1 or beyond commit 17838beda2943d08b8a9d4df5b68f5f04f26d901
Any project that uses Protobuf Pure-Python backend to parse untrusted Protocol Buffers data containing an arbitrary number of recursive groups, recursive messages or a series of SGROUP tags can be corrupted by exceeding the Python recursion limit. This can result in a Denial of service by crashing the application with a RecursionError. We recommend upgrading to version =>6.31.1 or beyond commit 17838beda2943d08b8a9d4df5b68f5f04f26d901
Any project that uses Protobuf Pure-Python backendto parse untrusted P ...
EPSS
5.3 Medium
CVSS3