PT-2015-3391 · Google +4 · Protobuf +4

🗓️ 27 Aug 2015 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 1 Views

Heap overflow in protobuf may enable remote code execution due to an integer handling error; no fix.

Reporter	Title	Published	Views	Family All 182
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in dependent libraries affect IBM® Db2® leading to denial of service or privilege escalation.	23 Jun 202118:01	–	ibm
IBM Security Bulletins	Security Bulletin: Common Vulnerabilities found in Cloudera Data Platform Private Cloud base with IBM	2 Mar 202614:33	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities were identified in IBM Security Verify Access.	9 Jan 202420:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	4 May 202117:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilites affect Engineering Lifecycle Management and IBM Engineering products.	27 Jul 202121:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Google Protocol Buffers	30 Jan 202316:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	27 Apr 202310:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple OS level vulnerabilities	26 Mar 202504:03	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities with DataStage on Cloud Pak for Data related to Apache hbase-client 2.4.15	18 Mar 202514:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar DNS Analyzer app is vulnerable to using components with known vulnerabilities	22 Aug 202414:38	–	ibm

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2015-5237
osv	www.osv.dev/vulnerability/PYSEC-2017-65
bdu	www.bdu.fstec.ru/vul/2021-00232
osv	www.osv.dev/vulnerability/USN-5769-1
errata	www.errata.altlinux.org/ALT-PU-2017-2591
wiki	www.wiki.astralinux.ru/astra-linux-se17-bulletin-2023-0630SE17MD
bdu	www.bdu.fstec.ru/vul/2023-03839
wiki	www.wiki.astralinux.ru/pages/viewpage.action
cve	www.cve.org/CVERecord
security-tracker	www.security-tracker.debian.org/tracker/source-package/protobuf

12 Jan 2024 00:00Current

7High risk

Vulners AI Score7

CVSS 26.5 - 9

CVSS 3.17.5 - 8.8

EPSS0.05064

SSVC