ai.superstream:kafka-clients (>=3.0.1-alpha, <=3.6.1-alpha1), ai.superstream:spring-kafka (>=2.8.4-alpha1, <=3.0.1-alpha1) +1387 more potentially affected by CVE-2021-22569 via com.google.protobuf:protobuf-java (>=3.19.0, <=3.19.1)

com.google.protobuf:protobuf-java MAVEN version =3.19.0, =3.0.1-alpha, =2.8.4-alpha1, =0.0.1-alpha1, =21.9.4, =21.9.4, =21.9.4, =21.9.4, =0.6.9-rc.2, =0.10.3, =0.10.3, =0.10.3, =0.10.3, =0.10.3, =0.10.3, =0.10.3, =0.10.4 and more Source cves: CVE-2021-22569 Source advisory: MEND:CVE-2021-22569...

CVE-2021-22569 Denial of Service of protobuf-java parsing procedure

An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be processed out of order. A small malicious payload can occupy the parser for several minutes by creating large numbers of short-lived objects that cause frequent, repeated...

A potential Denial of Service issue in protobuf-java

Summary A potential Denial of Service issue in protobuf-java was discovered in the parsing procedure for binary data. Affected versions: All versions of Java Protobufs including Kotlin and JRuby prior to the versions listed below. Protobuf "javalite" users typically Android are not affected...

CVE-2021-22569 Denial of Service of protobuf-java parsing procedure

An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be processed out of order. A small malicious payload can occupy the parser for several minutes by creating large numbers of short-lived objects that cause frequent, repeated...

CVE-2021-22569

CVE-2021-22569 concerns protobuf-java: an issue allowing interleaving of UnknownFieldSet fields that can cause the parser to linger due to many short-lived objects, potentially enabling DoS-like pauses. Connected sources show this vulnerability in multiple ecosystems (e.g., Debian protobuf packag...

CVE-2021-22569: Incorrect Behavior Order

An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be processed out of order. A small malicious payload can occupy the parser for several minutes by creating large numbers of short-lived objects that cause frequent, repeated...

cn.ac.ios.tis:riscvspeccore_2.12 (>=0.1.0, <=1.0.0), cn.dustlight.flow:flow-zeebe (>=0.1.3-alpha, <=0.1.7-alpha) +1037 more potentially affected by CVE-2021-22569 via com.google.protobuf:protobuf-java (>=3.18.0, <=3.18.1)

com.google.protobuf:protobuf-java MAVEN version =3.18.0, =0.1.0, =0.1.3-alpha, =0.0.1-alpha, =0.0.2-alpha - cn.vertxup:vertx-co 0.7.0 - cn.vertxup:vertx-ifx 0.7.0 - cn.vertxup:vertx-import 0.7.0 - cn.vertxup:vertx-pin 0.7.0 - cn.vertxup:vertx-rx 0.7.0 - cn.vertxup:vertx-tp 0.7.0 -...

golang-protobuf:textfuzz: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4796627280330752 Project: golang-protobuf Fuzzing Engine: libFuzzer Fuzz Target: textfuzz Job Type: libfuzzerasangolang-protobuf Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash...

com.googlecode.protobuf-rpc-pro:protobuf-rpc-pro-demo (>=3.0.1, <=3.0.2), com.googlecode.protobuf-rpc-pro:protobuf-rpc-pro-duplex (>=3.0.1, <=3.0.2) +1 more potentially affected by CVE-2021-43797 via io.netty:netty (3.6.0.final)

io.netty:netty MAVEN version 3.6.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - com.googlecode.protobuf-rpc-pro:protobuf-rpc-pro-demo =3.0.1, =3.0.1, =3.0.2 - tv.cntt:xitrum2.10 1.13 Source cves:...

golang-protobuf:textfuzz: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6023180435718144 Project: golang-protobuf Fuzzing Engine: libFuzzer Fuzz Target: textfuzz Job Type: libfuzzerasangolang-protobuf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffffffffffff Crash State: NULL Sanitizer: address AS...

SUSE SLED12 / SLES12 Security Update : javapackages-tools, javassist, mysql-connector-java, protobuf, python-python-gflags (SUSE-SU-2021:3450-1)

The remote SUSE Linux SLED12 / SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3450-1 advisory. Changes in mysql-connector-java: - Restrict license to GPL-2.0-only - Fix README adjustments - Depend on log4j rather than log4j-mini and adjus...

golang-protobuf:textfuzz: Crash in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=6362468876681216 Project: golang-protobuf Fuzzing Engine: libFuzzer Fuzz Target: textfuzz Job Type: libfuzzerasangolang-protobuf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000201328 Crash State: pthreadcreate...

The vulnerability of the GoGolang Protobuf library function, which allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the plugin/unmarshal/unmarshal.go library of GoGo Protobuf is related to incorrect array indexing. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

protobuf-java:ProtobufFuzzer: Timeout in ProtobufFuzzer

Detailed Report: https://oss-fuzz.com/testcase?key=6156425441705984 Project: protobuf-java Fuzzing Engine: libFuzzer Fuzz Target: ProtobufFuzzer Job Type: libfuzzerasanprotobuf-java Platform Id: linux Crash Type: Timeout exceeds 60 secs Crash Address: Crash State: ProtobufFuzzer Sanitizer: addres...

swift-protobuf:FuzzJSON_debug: Invalid-free in generic specialization <Swift.Int> of Swift.Array.subscript.getter :

Project: https://github.com/apple/swift-protobuf.git Detailed Report: https://oss-fuzz.com/testcase?key=5207244346621952 Project: swift-protobuf Fuzzing Engine: libFuzzer Fuzz Target: FuzzJSONdebug Job Type: libfuzzerasanswift-protobuf Platform Id: linux Crash Type: Invalid-free Crash Address:...

swift-protobuf:FuzzJSON_release: Invalid-free in swift_unexpectedError

Project: https://github.com/apple/swift-protobuf.git Detailed Report: https://oss-fuzz.com/testcase?key=4827369236463616 Project: swift-protobuf Fuzzing Engine: libFuzzer Fuzz Target: FuzzJSONrelease Job Type: libfuzzerasanswift-protobuf Platform Id: linux Crash Type: Invalid-free Crash Address:...

swift-protobuf:FuzzTextFormat_release: Invalid-free in swift_unexpectedError

Project: https://github.com/apple/swift-protobuf.git Detailed Report: https://oss-fuzz.com/testcase?key=4769249378304000 Project: swift-protobuf Fuzzing Engine: libFuzzer Fuzz Target: FuzzTextFormatrelease Job Type: libfuzzerasanswift-protobuf Platform Id: linux Crash Type: Invalid-free Crash...

golang-protobuf:textfuzz: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4980355610836992 Project: golang-protobuf Fuzzing Engine: libFuzzer Fuzz Target: textfuzz Job Type: libfuzzerasangolang-protobuf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000061377022 Crash State: NULL Sanitizer: address ASAN...

swift-protobuf:FuzzTextFormat_release: Invalid-free in swift_unexpectedError

Project: https://github.com/apple/swift-protobuf.git Detailed Report: https://oss-fuzz.com/testcase?key=5109315292233728 Project: swift-protobuf Fuzzing Engine: libFuzzer Fuzz Target: FuzzTextFormatrelease Job Type: libfuzzerasanswift-protobuf Platform Id: linux Crash Type: Invalid-free Crash...

swift-protobuf:FuzzJSON_release: Invalid-free in swift_unexpectedError

Project: https://github.com/apple/swift-protobuf.git Detailed Report: https://oss-fuzz.com/testcase?key=4929034878844928 Project: swift-protobuf Fuzzing Engine: libFuzzer Fuzz Target: FuzzJSONrelease Job Type: libfuzzerasanswift-protobuf Platform Id: linux Crash Type: Invalid-free Crash Address:...