Lucene search
GoogleOSV:GO-2023-1631HistoryMar 14, 2023 - 4:47 p.m.
Panic when parsing invalid messages in google.golang.org/protobuf
2023-03-1416:47:00
Google
osv.dev
31
google protocol buffers
golang
parsing panic
text-format
invalid messages
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7.6
Confidence
High
EPSS
0.001
Percentile
34.1%
Parsing invalid messages can panic.
Parsing a text-format message which contains a potential number consisting of a minus sign, one or more characters of whitespace, and no further input will cause a panic.
Related
redhatcve
redhatcve
CVE-2023-24535
2023-06-14 09:15:29
cgr
cgr
CVE-2023-24535 vulnerabilities
2024-05-19 03:07:16
osv
osv
google.golang.org/protobuf vulnerable to panic leading to denial of service
2023-03-14 23:01:50
CVE-2023-24535
2023-06-08 21:15:16
CGA-2v9j-v6h7-jm2h
2024-06-06 12:21:41
ibm
ibm
nvd
nvd
CVE-2023-24535
2023-06-08 21:15:16
cve
cve
CVE-2023-24535
2023-06-08 21:15:16
veracode
veracode
Denial Of Service (DoS)
2023-03-16 02:17:33
ubuntucve
ubuntucve
CVE-2023-24535
2023-06-08 00:00:00
debiancve
debiancve
CVE-2023-24535
2023-06-08 21:15:16
nessus
nessus
Google Protobuf Go Module 1.29 < 1.29.1 DoS
2023-04-12 00:00:00
prion
prion
Input validation
2023-06-08 21:15:00
cvelist
cvelist
github
github
google.golang.org/protobuf vulnerable to panic leading to denial of service
2023-03-14 23:01:50
wolfi
wolfi
CVE-2023-24535 vulnerabilities
2024-09-27 09:13:12
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7.6
Confidence
High
EPSS
0.001
Percentile
34.1%
Related for OSV:GO-2023-1631