CVE-2019-15544

An issue was discovered in the protobuf crate before 2.6.0 for Rust. Attackers can exhaust all memory via Vec::reserve calls...

azure-functions (>=0.1.1, <=0.2.1), azure-functions-shared (0.2.2) +17 more potentially affected by CVE-2019-15544 via protobuf (>=2.0.2, <=2.5.0)

protobuf CARGO version =2.0.2, =0.1.1, =0.3.0, =0.4.0, =0.1.0, =0.3.0, =0.3.0, =0.3.0, =2.0.2, =2.0.2, =0.2.0, =2.0.2, =2.5.0 - protoc-rust-no-elision 2.0.4 and more Source cves: CVE-2019-15544 Source advisory: OSV:GHSA-MH6H-F25P-98F8...

CVE-2019-15544

The CVE-2019-15544 issue affects the protobuf crate for Rust (pre-2.6.0). The vulnerability arises from Vec::reserve being fed by user-supplied input, enabling memory exhaustion. Documented impact: Out-of-Memory conditions, potentially affecting affected Rust crates that rely on this protobuf imp...

auth (0.1.0), dat-network-protocol (>=0.1.3, <=0.1.4) +16 more potentially affected by CVE-2019-15544 via protobuf (>=1.0.24, <=1.7.4)

protobuf CARGO version =1.0.24, =0.1.3, =0.3.1, =0.3.1, =1.7.2, =0.3.1, =0.0.1, =0.1.0, =0.1.2, =0.1.4 and more Source cves: CVE-2019-15544 Source advisory: OSV:RUSTSEC-2019-0003...

azure-functions (>=0.1.1, <=0.2.1), azure-functions-shared (0.2.2) +17 more potentially affected by CVE-2019-15544 via protobuf (>=2.0.2, <=2.5.0)

protobuf CARGO version =2.0.2, =0.1.1, =0.3.0, =0.4.0, =0.1.0, =0.3.0, =0.3.0, =0.3.0, =2.0.2, =2.0.2, =0.2.0, =2.0.2, =2.5.0 - protoc-rust-no-elision 2.0.4 and more Source cves: CVE-2019-15544 Source advisory: OSV:RUSTSEC-2019-0003...