Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2015-5237PYSEC-2017-65GHSA-JWVW-V7C5-M82HPYSEC-2017-150

protobuf allows remote authenticated attackers to cause a heap-based buffer overflow.

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 3.4.0
None on Exploit-DB, Metasploit or GitHub

Summary

protobuf allows remote authenticated attackers to cause a heap-based buffer overflow.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • n/a n/a

    Version range not reported

  • protobufPyPI

    fixed in 3.4.0

  • Google.ProtobufNuGet

    fixed in 3.4.0

  • com.google.protobuf:protobuf-parentMaven

    fixed in 3.4.0

  • github.com/protocolbuffers/protobufGo

    fixed in 3.4.0

  • google/protobufPackagist

    fixed in 3.4.0

References 25

GitHub · google/protobuf

openwall.com

bugzilla.redhat.com

lists.apache.org