Lucene search

K
ubuntuUbuntuUSN-5769-1
HistoryDec 08, 2022 - 12:00 a.m.

protobuf vulnerabilities

2022-12-0800:00:00
ubuntu.com
24

8 High

AI Score

Confidence

High

0.017 Low

EPSS

Percentile

87.7%

Releases

  • Ubuntu 16.04 ESM

Packages

  • protobuf - protocol buffers C++ library (development files)

Details

It was discovered that protobuf did not properly manage memory when serializing
large messages. An attacker could possibly use this issue to cause applications
using protobuf to crash, resulting in a denial of service, or possibly execute
arbitrary code. (CVE-2015-5237)

It was discovered that protobuf did not properly manage memory when parsing
specifically crafted messages. An attacker could possibly use this issue to
cause applications using protobuf to crash, resulting in a denial of service.
(CVE-2022-1941)