CVE-2020-5234

2020-01-3118:15:11

Google

osv.dev

0.01 Low

EPSS

Percentile

83.9%

JSON

MessagePack for C# and Unity before version 1.9.11 and 2.1.90 has a vulnerability where untrusted data can lead to DoS attack due to hash collisions and stack overflow. Review the linked GitHub Security Advisory for more information and remediation steps.

CPENameOperatorVersion
messagepack-csharpeq.1.7.3.6
messagepack-csharpeq2.0.270-rc
messagepack-csharpeq1.2.1
messagepack-csharpeq1.4.4
messagepack-csharpeq1.0.2
messagepack-csharpeq1.2.3
messagepack-csharpeq1.3.2
messagepack-csharpeq1.7.3
messagepack-csharpeq1.6.0
messagepack-csharpeq1.7.1

Name	Operator	Version
messagepack-csharp	eq	.1.7.3.6
messagepack-csharp	eq	2.0.270-rc
messagepack-csharp	eq	1.2.1
messagepack-csharp	eq	1.4.4
messagepack-csharp	eq	1.0.2
messagepack-csharp	eq	1.2.3
messagepack-csharp	eq	1.3.2
messagepack-csharp	eq	1.7.3
messagepack-csharp	eq	1.6.0
messagepack-csharp	eq	1.7.1