PT-2022-5139 · Google +4 · Protobuf-Java +6

🗓️ 04 Oct 2022 00:00:00Reported by Positive TechnologiesType

Java Protocol Buffers parsing flaw may cause denial of service; update protobuf-java to fixed versions; Jira products lack fix info.

Reporter	Title	Published	Views	Family All 1068
Rockylinux	protobuf security update	4 Oct 202500:11	–	rocky
Rockylinux	python-cryptography security, bug fix, and enhancement update	18 May 202105:38	–	rocky
Rockylinux	protobuf security update	8 Nov 202206:20	–	rocky
Rockylinux	protobuf security update	15 Nov 202206:12	–	rocky
Rosalinux	Advisory ROSA-SA-2025-2753	1 Mar 202521:41	–	rosalinux
Rosalinux	Advisory ROSA-SA-2025-3099	2 Dec 202513:20	–	rosalinux
RubySec	A potential Denial of Service issue in protobuf-java	7 Jan 202200:00	–	rubygems
RubySec	protobuf-java has a potential Denial of Service issue	4 Oct 202200:00	–	rubygems
Snyk	Denial of Service (DoS)	23 Sep 202208:39	–	snyk
Snyk	Denial of Service (DoS)	7 Jan 202214:20	–	snyk

Source	Link
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/google-protobuf/CVE-2022-3171.yml
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/MPCGUT3T5L6C3IDWUPSUO22QDCGQKTOP
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
repo	www.repo.red-soft.ru/redos/7.3c/x86_64/updates
bdu	www.bdu.fstec.ru/vul/2023-03839
osv	www.osv.dev/vulnerability/CVE-2022-3171
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CBAUKJQL6O4TIWYBENORSY5P43TVB4M3
advisories	www.advisories.mageia.org/MGASA-2023-0092.html
osv	www.osv.dev/vulnerability/GHSA-h4h5-3hr4-j3g2
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MPCGUT3T5L6C3IDWUPSUO22QDCGQKTOP

22 Apr 2025 00:00Current

6.1Medium risk

Vulners AI Score6.1

CVSS 26.4 - 7.8

CVSS 3.17.5 - 9.1

EPSS0.06718

SSVC