USN-5769-1

Dashboard / Vulnerabilities / USN-5769-1

USN-5769-1

Summary: protobuf vulnerabilities

Details: It was discovered that protobuf did not properly manage memory when serializing large messages. An attacker could possibly use this issue to cause applications using protobuf to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2015-5237) It was discovered that protobuf did not properly manage memory when parsing specifically crafted messages. An attacker could possibly use this issue to cause applications using protobuf to crash, resulting in a denial of service. (CVE-2022-1941)

References: https://ubuntu.com/security/notices/USN-5769-1, https://ubuntu.com/security/CVE-2015-5237, https://ubuntu.com/security/CVE-2022-1941