Lucene search
RedHatRHSA-2024:3433HistoryMay 28, 2024 - 1:22 p.m.
(RHSA-2024:3433) Moderate: protobuf security update
2024-05-2813:22:24
access.redhat.com
7
rhsa-2024-3433
protocol buffers
google
data interchange
security fix
nullchar parsing
nullptr dereference
cve-2021-22570
cvss score
acknowledgments
references
unix
The protobuf packages provide Protocol Buffers, Google’s data interchange format. Protocol Buffers can encode structured data in an efficient yet extensible format, and provide a flexible, efficient, and automated mechanism for serializing structured data.
Security Fix(es):
- protobuf: Incorrect parsing of nullchar in the proto symbol leads to Nullptr dereference (CVE-2021-22570)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 8 | i686 | protobuf-lite | < 3.5.0-15.el8_6 | protobuf-lite-3.5.0-15.el8_6.i686.rpm |
| RedHat | 8 | x86_64 | protobuf | < 3.5.0-15.el8_6 | protobuf-3.5.0-15.el8_6.x86_64.rpm |
| RedHat | 8 | s390x | protobuf-devel | < 3.5.0-15.el8_6 | protobuf-devel-3.5.0-15.el8_6.s390x.rpm |
| RedHat | 8 | s390x | protobuf | < 3.5.0-15.el8_6 | protobuf-3.5.0-15.el8_6.s390x.rpm |
| RedHat | 8 | ppc64le | protobuf-lite-devel | < 3.5.0-15.el8_6 | protobuf-lite-devel-3.5.0-15.el8_6.ppc64le.rpm |
| RedHat | 8 | s390x | protobuf-lite-debuginfo | < 3.5.0-15.el8_6 | protobuf-lite-debuginfo-3.5.0-15.el8_6.s390x.rpm |
| RedHat | 8 | i686 | protobuf-compiler-debuginfo | < 3.5.0-15.el8_6 | protobuf-compiler-debuginfo-3.5.0-15.el8_6.i686.rpm |
| RedHat | 8 | s390x | protobuf-compiler | < 3.5.0-15.el8_6 | protobuf-compiler-3.5.0-15.el8_6.s390x.rpm |
| RedHat | 8 | x86_64 | protobuf-debuginfo | < 3.5.0-15.el8_6 | protobuf-debuginfo-3.5.0-15.el8_6.x86_64.rpm |
| RedHat | 8 | x86_64 | protobuf-compiler | < 3.5.0-15.el8_6 | protobuf-compiler-3.5.0-15.el8_6.x86_64.rpm |
Related
fedora
fedora
[SECURITY] Fedora 35 Update: mingw-protobuf-3.14.0-4.fc35
2022-03-09 19:44:14
[SECURITY] Fedora 34 Update: protobuf-3.14.0-7.fc34
2022-02-27 03:21:56
[SECURITY] Fedora 34 Update: mingw-protobuf-3.14.0-4.fc34
2022-03-09 19:16:34
nessus
nessus
EulerOS Virtualization 2.9.1 : protobuf (EulerOS-SA-2022-2188)
2022-07-29 00:00:00
EulerOS Virtualization 2.9.0 : protobuf (EulerOS-SA-2022-2207)
2022-07-29 00:00:00
SUSE SLES15 Security Update : protobuf (SUSE-SU-2022:1040-3)
2022-10-07 00:00:00
osv
osv
PYSEC-2022-48
2022-01-26 14:15:00
Moderate: protobuf security update
2022-11-08 06:20:13
Moderate: protobuf security update
2022-11-08 00:00:00
oraclelinux
oraclelinux
protobuf security update
2022-11-15 00:00:00
protobuf security update
2022-11-22 00:00:00
amazon
amazon
Medium: protobuf
2023-02-03 19:19:00
Medium: protobuf
2023-02-17 00:11:00
Medium: protobuf
2023-01-31 20:44:00
openvas
openvas
Huawei EulerOS: Security Advisory for protobuf (EulerOS-SA-2022-1814)
2022-06-07 00:00:00
Fedora: Security Advisory for mingw-protobuf (FEDORA-2022-486d5f349d)
2022-03-23 00:00:00
Huawei EulerOS: Security Advisory for protobuf (EulerOS-SA-2022-2062)
2022-07-14 00:00:00
redhatcve
redhatcve
CVE-2021-22570
2022-02-02 10:05:39
rocky
rocky
protobuf security update
2022-11-08 06:20:13
protobuf security update
2022-11-15 06:12:20
cgr
cgr
CVE-2021-22570 vulnerabilities
2024-05-19 03:07:16
cvelist
cvelist
CVE-2021-22570 Nullptr Dereference in Protobuf
2022-01-26 00:00:00
cve
cve
CVE-2021-22570
2022-01-26 14:15:08
almalinux
almalinux
Moderate: protobuf security update
2022-11-15 00:00:00
Moderate: protobuf security update
2022-11-08 00:00:00
wolfi
wolfi
CVE-2021-22570 vulnerabilities
2024-06-22 09:08:24
redhat
redhat
(RHSA-2022:8847) Moderate: Red Hat OpenStack Platform 16.2.4 (protobuf) security update
2022-12-07 19:00:34
(RHSA-2022:7464) Moderate: protobuf security update
2022-11-08 06:20:13
(RHSA-2022:7970) Moderate: protobuf security update
2022-11-15 06:12:20
ibm
ibm
debiancve
debiancve
CVE-2021-22570
2022-01-26 14:15:08
nvd
nvd
CVE-2021-22570
2022-01-26 14:15:08
veracode
veracode
Denial Of Service (DoS)
2022-11-19 00:46:21
github
github
NULL Pointer Dereference in Protocol Buffers
2022-01-27 00:01:15
suse
suse
Security update for protobuf (moderate)
2022-03-30 00:00:00
Security update for protobuf (moderate)
2022-03-14 00:00:00
alpinelinux
alpinelinux
CVE-2021-22570
2022-01-26 14:15:00
prion
prion
Design/Logic Flaw
2022-01-26 14:15:00
cbl_mariner
cbl_mariner
CVE-2021-22570 affecting package mysql for versions less than 8.0.29-1
2022-07-01 21:02:51
CVE-2021-22570 affecting package protobuf 3.14.0-1
2024-06-22 03:09:17
ubuntu
ubuntu
Protocol Buffers vulnerability
2022-06-21 00:00:00
Protocol Buffers vulnerabilities
2023-03-13 00:00:00
ubuntucve
ubuntucve
CVE-2021-22570
2022-01-26 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2022-0170
2022-04-07 00:00:00
Important Photon OS Security Update - PHSA-2022-4.0-0170
2022-04-07 00:00:00
Important Photon OS Security Update - PHSA-2022-3.0-0415
2022-07-07 00:00:00
debian
debian
[SECURITY] [DLA 3393-1] protobuf security update
2023-04-18 07:12:21
altlinux
altlinux
Security fix for the ALT Linux 10 package MySQL version 8.0.29-alt1
2022-07-05 00:00:00
freebsd
freebsd
MySQL -- Multiple vulnerabilities
2022-04-16 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00