CVE-2019-15544

An issue was discovered in the protobuf crate before 2.6.0 for Rust. Attackers can exhaust all memory via Vec::reserve calls...

Brains (>=0.1.0 <=0.2.0), Route16 (=0.0.1) +914 more potentially affected by CVE-2019-15544 via protobuf (>=0.0.10 <=2.5.0)

protobuf CARGO version =0.0.10, =0.1.0, =0.4.0, =0.1.0, =0.1.0, =0.13.0, =0.11.0, =0.11.0, =1.1.0, =0.4.3, =0.1.0, =0.1.0, =0.1.0, =0.17.0 and more Source cves: CVE-2019-15544 Source advisory: OSV:GHSA-MH6H-F25P-98F8...

CVE-2019-15544

The CVE-2019-15544 issue affects the protobuf crate for Rust (pre-2.6.0). The vulnerability arises from Vec::reserve being fed by user-supplied input, enabling memory exhaustion. Documented impact: Out-of-Memory conditions, potentially affecting affected Rust crates that rely on this protobuf imp...

auth (=0.1.0), dat-network-protocol (>=0.1.3 <=0.1.4) +18 more potentially affected by CVE-2019-15544 via protobuf (>=0.0.10 <=1.7.4)

protobuf CARGO version =0.0.10, =0.1.3, =0.3.1, =0.3.1, =1.7.2, =0.3.1, =0.0.1, =0.1.0, =0.2.2 - roboime-next-protocol =0.1.0 and more Source cves: CVE-2019-15544 Source advisory: OSV:RUSTSEC-2019-0003...