AZL-26159 CVE-2022-48468 affecting package protobuf-c for versions less than 1.4.1-1

protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember...

DEBIAN-CVE-2022-48468

protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember...

CVE-2022-48468

protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember...

UBUNTU-CVE-2022-48468

protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember...

Integer overflow

protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember...

protobuf-c 输入验证错误漏洞

protobuf-c is a C-based protocol buffer implementation. A security vulnerability exists in protobuf-c versions prior to 1.4.1, which stems from the presence of an unsigned integer overflow...

PT-2023-3201 · Unknown +7 · Protobuf-C +7

Name of the Vulnerable Software and Affected Versions: protobuf-c versions prior to 1.4.1 Description: The issue is related to an unsigned integer overflow in the parse required member function of the protobuf-c protocol serialization data. This can be exploited by a remote attacker to execute...

CVE-2022-48468

protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember...

CVE-2022-48468

protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember...

CVE-2022-48468

CVE-2022-48468 affects protobuf-c prior to v1.4.1, with an unsigned integer overflow in parse_required_member. Connected advisories confirm the issue across distributions (e.g., Astra Linux, AlmaLinux, Amazon Linux 2, and Mariner/CBL) and consistently cite protobuf-c before 1.4.1 as vulnerable. T...

CVE-2022-48468

protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember...

CVE-2022-48468

protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember...

Low: protobuf-c

Issue Overview: A flaw was found in protobuf-c. The issue occurs due to an invalid arithmetic shift via the parsetagandwiretype in the protobuf-c/protobuf-c.c function. This flaw allows attackers to cause a denial of service DoS via unspecified vectors. CVE-2022-33070 Affected Packages: protobuf-...

Amazon Linux 2023 : protobuf-c, protobuf-c-compiler, protobuf-c-devel (ALAS2023-2023-086)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-086 advisory. A flaw was found in protobuf-c. The issue occurs due to an invalid arithmetic shift via the parsetagandwiretype in the protobuf-c/protobuf-c.c function. This flaw allows attackers to cause a denial of...

SUSE CVE-2022-33070

Protobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function parsetagandwiretype in protobuf-c/protobuf-c.c. This vulnerability allows attackers to cause a Denial of Service DoS via unspecified vectors...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Sudo vulnerabilities (USN-5811-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5811-1 advisory. Matthieu Barjole and Victor Cutillas discovered that Sudo incorrectly handled user-specified editors when using the sudoedit...

USN-5811-1 sudo vulnerabilities

Matthieu Barjole and Victor Cutillas discovered that Sudo incorrectly handled user-specified editors when using the sudoedit command. A local attacker that has permission to use the sudoedit command could possibly use this issue to edit arbitrary files. CVE-2023-22809 It was discovered that the...

EulerOS Virtualization 2.10.0 : sudo (EulerOS-SA-2022-2921)

According to the versions of the sudo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Protobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function parsetagandwiretype in...

EulerOS Virtualization 2.10.1 : sudo (EulerOS-SA-2022-2947)

According to the versions of the sudo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Protobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function parsetagandwiretype in...

Amazon Linux 2022 : protobuf-c (ALAS2022-2022-248)

The version of protobuf-c installed on the remote host is prior to 1.4.1-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-248 advisory. - Protobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function parsetagandwiretype in...