Integer overflow

🗓️ 13 Apr 2023 21:15:00Reported by PRIOn knowledge baseType

prion

prion🔗 www.prio-n.com👁 19 Views

protobuf-c integer overflow in parse_required_membe

Reporter	Title	Published	Views	Family All 120
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to protobuf-c Integer Overflow or Wraparound vulnerabilitiy [ CVE-2022-48468]	5 Feb 202419:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from go-git , Golang, GnuTLS, Libxml2, protobuf-c, JSON-java, Libmaxminddb, SQLite3 packages and cryptographic algorithms	1 Mar 202405:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Workload Automation affected by multiple vulnerabilities in RHEL (CVE-2023-32681, CVE-2022-48468)	16 Feb 202418:40	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities exists in IBM Cloud Pak for Data System (CPDS 1.0) - NPS.	26 May 202606:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for AIOps	16 Oct 202422:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities affect IBM Robotic Process Automation for Cloud Pak.	16 Jan 202419:45	–	ibm
IBM Security Bulletins	Security Bulletin: Denial of service, SQL injection, and other vulnerabilities might affect IBM Storage Defender – Resiliency Service	24 Feb 202523:37	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in protobuf-c affects IBM Netezza Appliance	13 Jan 202607:39	–	ibm
Tenable Nessus	Amazon Linux 2 : protobuf-c (ALAS-2023-2142)	20 Jul 202300:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0004: protobuf-c (ALINUX3-SA-2024:0004)	14 May 202500:00	–	nessus

Source	Link
github	www.github.com/protobuf-c/protobuf-c/issues/499
github	www.github.com/protobuf-c/protobuf-c/pull/513
github	www.github.com/protobuf-c/protobuf-c/commit/ec3d900001a13ccdaa8aef996b34c61159c76217
github	www.github.com/protobuf-c/protobuf-c/releases/tag/v1.4.1
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EI4JZSHJXW7WOOTAQSV5SUCC5GE2GC2B/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VNUEZZEPR2F6M67ANXLOPJX6AQL3TK4P/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UGLZZYPOLI733DPETL444E3GY5KSS6LG/

07 Nov 2023 03:56Current

5.7Medium risk

Vulners AI Score5.7

EPSS0.0003

integer overflow protobuf-c nvd unsigned integer parse required member