Lucene search
+L

286 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:30 p.m.3 views

Malicious code in NSеrvісeBus.ProtoBսf (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
OpenVAS
OpenVAS
added 2024/06/07 12:0 a.m.9 views

Fedora: Security Advisory for qt6-qtgrpc (FEDORA-2024-bfb8617ba3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS10AI score0.0097EPSS
Exploits0References2
Fedora
Fedora
added 2024/05/29 3:37 a.m.12 views

[SECURITY] Fedora 40 Update: qt6-qtgrpc-6.7.1-1.fc40

Protocol Buffers Protobuf is a cross-platform data format used to serialize structured data. gRPC provides a remote procedure call framework based on Protobuf. Qt provides tooling and classes to use these technologies...

9.8CVSS6.3AI score0.0097EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2024/05/28 2:30 p.m.68 views

Moderate: Red Hat Security Advisory: protobuf security update

An update for protobuf is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

6.5CVSS6.6AI score0.0266EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/05/28 12:0 a.m.28 views

RHEL 8 : protobuf (RHSA-2024:3433)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:3433 advisory. The protobuf packages provide Protocol Buffers, Google's data interchange format. Protocol Buffers can encode structured data in an efficient yet...

6.5CVSS6.6AI score0.0266EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2024/05/27 12:0 a.m.12 views

The vulnerability of the JsonToBinaryStream() function in the Protobuf data serialization protocol for the C programming language allows a attacker to execute arbitrary code.

The vulnerability of the JsonToBinaryStream function in the Protobuf data serialization protocol for the C programming language is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created JSON file...

8CVSS7.7AI score0.00332EPSS
Exploits0References6Affected Software2
NVD
NVD
added 2024/05/03 1:15 p.m.11 views

CVE-2024-2410

The JsonToBinaryStream function is part of the protocol buffers C++ implementation and is used to parse JSON from a stream. If the input is broken up into separate chunks in a certain way, the parser will attempt to read bytes from a chunk that has already been freed...

9.8CVSS7.4AI score0.00332EPSS
Exploits0References1
OSV
OSV
added 2024/05/03 1:15 p.m.12 views

AZL-51319 CVE-2024-2410 affecting package mysql for versions less than 8.0.40-2

The JsonToBinaryStream function is part of the protocol buffers C++ implementation and is used to parse JSON from a stream. If the input is broken up into separate chunks in a certain way, the parser will attempt to read bytes from a chunk that has already been freed...

9.8CVSS5.7AI score0.00332EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2024/05/03 1:15 p.m.18 views

CVE-2024-2410

The JsonToBinaryStream function is part of the protocol buffers C++ implementation and is used to parse JSON from a stream. If the input is broken up into separate chunks in a certain way, the parser will attempt to read bytes from a chunk that has already been freed...

9.8CVSS7AI score0.00332EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/05/03 12:58 p.m.24 views

CVE-2024-2410 Use after free in C++ protobuf

The JsonToBinaryStream function is part of the protocol buffers C++ implementation and is used to parse JSON from a stream. If the input is broken up into separate chunks in a certain way, the parser will attempt to read bytes from a chunk that has already been freed...

7.6CVSS6.6AI score0.00332EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/05/03 12:58 p.m.32 views

CVE-2024-2410 Use after free in C++ protobuf

The JsonToBinaryStream function is part of the protocol buffers C++ implementation and is used to parse JSON from a stream. If the input is broken up into separate chunks in a certain way, the parser will attempt to read bytes from a chunk that has already been freed...

7.6CVSS7.5AI score0.00332EPSS
Exploits0References1
OSV
OSV
added 2024/05/03 12:58 p.m.7 views

CVE-2024-2410 Use after free in C++ protobuf

The JsonToBinaryStream function is part of the protocol buffers C++ implementation and is used to parse JSON from a stream. If the input is broken up into separate chunks in a certain way, the parser will attempt to read bytes from a chunk that has already been freed...

7.6CVSS7AI score0.00332EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2024/05/03 12:58 p.m.56 views

CVE-2024-2410

The JsonToBinaryStream function is part of the protocol buffers C++ implementation and is used to parse JSON from a stream. If the input is broken up into separate chunks in a certain way, the parser will attempt to read bytes from a chunk that has already been freed...

9.8CVSS7.1AI score0.00332EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2024/05/03 12:0 a.m.2 views

PT-2024-3777

Name of the Vulnerable Software and Affected Versions protocol buffers versions prior to 4.24.x Description The issue is related to the JsonToBinaryStream function, which is part of the protocol buffers C++ implementation. This function is used to parse JSON from a stream. If the input is broken ...

9.8CVSS7.2AI score0.00332EPSS
Exploits0References30
RedHat Linux
RedHat Linux
added 2024/03/27 12:46 a.m.6 views

golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON

A flaw was found in Golang's protobuf module, where the unmarshal function can enter an infinite loop when processing certain invalid inputs. This issue occurs during unmarshaling into a message that includes a google.protobuf.Any or when the UnmarshalOptions.DiscardUnknown option is enabled. Thi...

7.5CVSS6.7AI score0.01262EPSS
Exploits0References7
OSV
OSV
added 2024/03/05 11:15 p.m.7 views

AZL-35670 CVE-2024-24786 affecting package prometheus for versions less than 2.45.4-6

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

7.5CVSS6.7AI score0.01262EPSS
Exploits0References1
OSV
OSV
added 2024/03/05 11:15 p.m.7 views

AZL-35581 CVE-2024-24786 affecting package kubevirt for versions less than 0.59.0-17

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

7.5CVSS6.7AI score0.01262EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2024/01/25 8:31 a.m.384 views

Moderate: Red Hat Security Advisory: protobuf-c security update

An update for protobuf-c is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

5.5CVSS6.7AI score0.00369EPSS
Exploits0References2
Wallarm Lab
Wallarm Lab
added 2024/01/02 3:2 p.m.28 views

What is Protobuf?

The Introduction: Decrypting Protocol Buffers When navigating through the intricate world of data encoding and decoding mechanisms, Protocol Buffers, or widely known as Protobuf, have carved their position as a dynamic contender. The brainchild of Google, this binary blueprint aims for advanced...

7AI score
Exploits0
RedHat Linux
RedHat Linux
added 2023/11/14 4:13 p.m.68 views

Moderate: Red Hat Security Advisory: protobuf-c security update

An update for protobuf-c is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

5.5CVSS6.7AI score0.00369EPSS
Exploits0References3
Rows per page
Query Builder