swift-protobuf:FuzzTextFormat_release: Invalid-free in swift_unexpectedError

Project: https://github.com/apple/swift-protobuf.git Detailed Report: https://oss-fuzz.com/testcase?key=4769249378304000 Project: swift-protobuf Fuzzing Engine: libFuzzer Fuzz Target: FuzzTextFormatrelease Job Type: libfuzzerasanswift-protobuf Platform Id: linux Crash Type: Invalid-free Crash...

golang-protobuf:textfuzz: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4980355610836992 Project: golang-protobuf Fuzzing Engine: libFuzzer Fuzz Target: textfuzz Job Type: libfuzzerasangolang-protobuf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000061377022 Crash State: NULL Sanitizer: address ASAN...

swift-protobuf:FuzzTextFormat_release: Invalid-free in swift_unexpectedError

Project: https://github.com/apple/swift-protobuf.git Detailed Report: https://oss-fuzz.com/testcase?key=5109315292233728 Project: swift-protobuf Fuzzing Engine: libFuzzer Fuzz Target: FuzzTextFormatrelease Job Type: libfuzzerasanswift-protobuf Platform Id: linux Crash Type: Invalid-free Crash...

swift-protobuf:FuzzJSON_release: Invalid-free in swift_unexpectedError

Project: https://github.com/apple/swift-protobuf.git Detailed Report: https://oss-fuzz.com/testcase?key=4929034878844928 Project: swift-protobuf Fuzzing Engine: libFuzzer Fuzz Target: FuzzJSONrelease Job Type: libfuzzerasanswift-protobuf Platform Id: linux Crash Type: Invalid-free Crash Address:...

Consul Exposed to Denial of Service in GoGo Protobuf Dependency

Summary Consul and Consul Enterprise “Consul” were vulnerable to denial of service due to a flaw in the gogo/protobuf module used for Consul’s protocol buffer support. This vulnerability, CVE-2021-3121, was addressed in Consul and Consul Enterprise 1.8.15, 1.9.9 and 1.10.2. Background Consul has ...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.7.28 security update

Red Hat OpenShift Container Platform release 4.7.28 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, whic...

abbegm (>=0.1.0, <=0.2.1), abci-rs (>=0.10.0, <=0.11.1) +594 more potentially affected by CVE-2021-38192 via prost-types (>=0.2.3, <=0.7.0)

prost-types CARGO version =0.2.3, =0.1.0, =0.10.0, =0.0.2, =0.0.0, =0.1.3, =0.1.0, =0.17.0, =0.16.0, =0.1.2-alpha.3, =0.8.0, =0.8.0, =0.8.0, =0.11.0 and more Source cves: CVE-2021-38192 Source advisory: OSV:GHSA-X4QM-MCJQ-V2GF...

actix-protobuf (>=0.4.0, <=0.4.1), arc-cli (0.1.0) +106 more potentially affected by CVE-2020-35858 via prost (>=0.1.0, <=0.5.0)

prost CARGO version =0.1.0, =0.4.0, =0.8.0, =0.8.0, =0.8.0, =0.1.0, =0.1.0-alpha, =0.1.0, =0.1.0, =0.8.0, =0.1.0-alpha.1, =0.1.0-alpha.2 and more Source cves: CVE-2020-35858 Source advisory: OSV:GHSA-GV73-9MWV-FWGQ...

Uncontrolled memory consumption in protobuf

Affected versions of this crate called Vec::reserve on user-supplied input. This allows an attacker to cause an Out of Memory condition while calling the vulnerable method on untrusted data...

azure-functions (>=0.1.1, <=0.2.1), azure-functions-shared (0.2.2) +17 more potentially affected by CVE-2019-15544 via protobuf (>=2.0.2, <=2.5.0)

protobuf CARGO version =2.0.2, =0.1.1, =0.3.0, =0.4.0, =0.1.0, =0.3.0, =0.3.0, =0.3.0, =2.0.2, =2.0.2, =0.2.0, =2.0.2, =2.5.0 - protoc-rust-no-elision 2.0.4 and more Source cves: CVE-2019-15544 Source advisory: OSV:GHSA-MH6H-F25P-98F8...

GHSA-MH6H-F25P-98F8 Uncontrolled memory consumption in protobuf

Affected versions of this crate called Vec::reserve on user-supplied input. This allows an attacker to cause an Out of Memory condition while calling the vulnerable method on untrusted data...

CVE-2021-3121

A flaw was found in github.com/gogo/protobuf before 1.3.2 that allows an out-of-bounds access when unmarshalling certain protobuf objects. This flaw allows a remote attacker to send crafted protobuf messages, causing panic and resulting in a denial of service. The highest threat from this...

golang-protobuf:textfuzz: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4514207457476608 Project: golang-protobuf Fuzzing Engine: libFuzzer Fuzz Target: textfuzz Job Type: libfuzzerasangolang-protobuf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x10c0001ffe80 Crash State: NULL Sanitizer: address ASAN...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.7.23 security update

Red Hat OpenShift Container Platform release 4.7.23 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which...

Moderate: Red Hat Security Advisory: OpenShift Virtualization 4.8.0 Images

Red Hat OpenShift Virtualization release 4.8.0 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which give...

gogo/protobuf: plugin/unmarshal/unmarshal.go lacks certain index validation

A flaw was found in github.com/gogo/protobuf before 1.3.2 that allows an out-of-bounds access when unmarshalling certain protobuf objects. This flaw allows a remote attacker to send crafted protobuf messages, causing panic and resulting in a denial of service. The highest threat from this...

golang-protobuf:wirefuzz: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5340114711609344 Project: golang-protobuf Fuzzing Engine: libFuzzer Fuzz Target: wirefuzz Job Type: libfuzzerasangolang-protobuf Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate...

Security update for wireshark (important)

openSUSE Security Update: Security update for wireshark Announcement ID: openSUSE-SU-2021:2125-1 Rating: important References: 1179930 1179931 1179932 1179933 1180102 1180232 1181598 1181599 1183353 1184110 1185128 Cross-References: CVE-2020-26418 CVE-2020-26419 CVE-2020-26420 CVE-2020-26421...

SUSE: Security Advisory (SUSE-SU-2021:2125-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Moderate: Red Hat Security Advisory: Openshift Logging Bug Fix Release (5.0.5)

Openshift Logging Bug Fix Release 5.0.5 This release includes a security update. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabili...