protobuf-java: potential DoS in the parsing procedure for binary data

🗓️ 07 Jul 2022 14:19:49Reported by RedHatType

Protobuf-java flaw allows interleaving UnknownFieldSet fields to trigger ProtobufFuzzer timeout and denial of service.

Reporter	Title	Published	Views	Family All 121
IBM Security Bulletins	Security Bulletin: Vulnerability from Google Protocol Buffer affect IBM Operations Analytics - Log Analysis (CVE-2021-22569)	7 Nov 202211:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.6 addresses multiple security vulnerabilities	4 Sep 202311:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium Insights is affected by multiple vulnerabilities	8 Apr 202220:24	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities found within Apache Storm that is used by IBM Tivoli Network Manager (ITNM) IP Edition	24 Feb 202306:34	–	ibm
IBM Security Bulletins	Security Bulletin: User Entity Behavior Analytics app for IBM QRadar SIEM includes components with known vulnerabilities	17 Oct 202515:07	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities with DataStage on Cloud Pak for Data related to Apache hbase-client 2.4.15	18 Mar 202514:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Disconnected Log Collector is vulnerable to using components with known vulnerabilities	29 Sep 202318:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities	8 Nov 202220:16	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities affecting IBM Knowledge Catalog for IBM Cloud Pak for Data	1 Jul 202522:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities	5 May 202316:01	–	ibm

Vulners

Node

AND

redhat jboss_fuseRange<7

redhat enterprise_linux

Source	Link
access	www.access.redhat.com/security/cve/CVE-2021-22569
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/protocolbuffers/protobuf/commit/b3093dce58bc9d3042f085666d83c8ef1f51fe7b
github	www.github.com/protocolbuffers/protobuf/security/advisories/GHSA-wrvw-hg22-4m67
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-22569
cve	www.cve.org/CVERecord

07 Jul 2026 09:23Current

7.2High risk

Vulners AI Score7.2

CVSS 24.3

CVSS 3.15.5 - 7.5

EPSS0.01655

SSVC

CWE-696