The vulnerability of the compiler of the protobuf serialization library allows a hacker to execute arbitrary code.

🗓️ 21 Jan 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

The Protocol Buffers compiler vulnerability allows remote code execution due to an integer handling error.

Reporter	Title	Published	Views	Family All 47
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in dependent libraries affect IBM® Db2® leading to denial of service or privilege escalation.	23 Jun 202118:01	–	ibm
IBM Security Bulletins	Security Bulletin: Common Vulnerabilities found in Cloudera Data Platform Private Cloud base with IBM	2 Mar 202614:33	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities were identified in IBM Security Verify Access.	9 Jan 202420:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	4 May 202117:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilites affect Engineering Lifecycle Management and IBM Engineering products.	27 Jul 202121:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	27 Apr 202310:23	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities with DataStage on Cloud Pak for Data related to Apache hbase-client 2.4.15	18 Mar 202514:59	–	ibm
IBM Security Bulletins	Security Bulletin: Astronomer with IBM is vulnerable to several vulnerabilities (CVE-2008-5730, CVE-2015-5237, CVE-2018-12020, CVE-2019-13050, CVE-2019-14855, CVE-2019-1543, CVE-2020-25125, CVE-2021-3712, CVE-2022-31130, CVE-2023-0464, CVE-2022-1292)	11 Aug 202513:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities	5 May 202316:01	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Google Protocol Buffers affect IBM watsonx.data	25 Sep 202419:07	–	ibm

Vulners

Node

google protobufRange<3.4.0

Source	Link
github	www.github.com/google/protobuf/issues/760
nvd	www.nvd.nist.gov/vuln/detail/CVE-2015-5237
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
securityfocus	www.securityfocus.com/bid/105086/discuss
wiki	www.wiki.astralinux.ru/astra-linux-se17-bulletin-2023-0630SE17MD
wiki	www.wiki.astralinux.ru/astra-linux-se47-bulletin-2023-0907SE47
web	www.web.nvd.nist.gov/view/vuln/detail

20 Sep 2023 00:00Current

7High risk

Vulners AI Score7

CVSS 38.8

CVSS 29

EPSS0.05106

Protocol Buffers serialization compiler integer handling error remote code execution