CVE-2021-3121

🗓️ 11 Jan 2021 05:57:18Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 8 Media mentions👁 669 Views

An issue in GoGo Protobuf before 1.3.2 allows unvalidated index in unmarshal.g

Reporter	Title	Published	Views	Family All 129
IBM Security Bulletins	Security Bulletin: IBM Security Guardium Insights is affected by multiple vulnerabilities	19 Jun 202517:12	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	20 Aug 202218:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	8 Jun 202321:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operator may be vulnerable to CVE-2021-3121	4 Nov 202217:39	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities that affects IBM Db2 Data Management Console (CVE-2021-3121, CVE-2021-38561, CVE-2023-43804)	23 Jul 202520:12	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.7 contains fixes for multiple security vulnerabilities.	15 Dec 202209:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Private is vulnerable to a Go vulnerability (CVE-2021-3121)	2 Sep 202121:39	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM® Db2® On Openshift and IBM® Db2® and Db2 Warehouse® on Cloud Pak for Data	29 Jun 202217:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Edge Application Manager 4.5 addresses multiple security vulnerabilities	31 May 202305:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to assorted vulnerabilities in Grafana	19 Jul 202421:46	–	ibm

NVD

Node

golang protobufRange<1.3.2

Node

hashicorp consulRange<1.8.15-

hashicorp consulRange<1.8.15enterprise

hashicorp consulRange1.9.0–1.9.9-

hashicorp consulRange1.9.0–1.9.9enterprise

hashicorp consulRange1.10.0–1.10.2-

hashicorp consulRange1.10.0–1.10.2enterprise

Source	Link
lists	www.lists.apache.org/thread.html/r88d69555cb74a129a7bf84838073b61259b4a3830190e05a3b87994e%40%3Ccommits.pulsar.apache.org%3E
lists	www.lists.apache.org/thread.html/r68032132c0399c29d6cdc7bd44918535da54060a10a12b1591328bff%40%3Cnotifications.skywalking.apache.org%3E
discuss	www.discuss.hashicorp.com/t/hcsec-2021-23-consul-exposed-to-denial-of-service-in-gogo-protobuf-dependency/29025
lists	www.lists.apache.org/thread.html/rc1e9ff22c5641d73701ba56362fb867d40ed287cca000b131dcf4a44%40%3Ccommits.pulsar.apache.org%3E
security	www.security.netapp.com/advisory/ntap-20210219-0006/
github	www.github.com/gogo/protobuf/compare/v1.3.1...v1.3.2
github	www.github.com/gogo/protobuf/commit/b03c65ea87cdc3521ede29f62fe3ce239267c1bc

21 Nov 2024 06:20Current

8.2High risk

Vulners AI Score8.2

CVSS 27.5

CVSS 3.18.6

EPSS0.00135

CWE-129