PT-2015-3391 · Google+4 · Protobuf+4
Merlimat
·
Publicado
2015-08-27
·
Atualizado
2024-01-12
·
CVE-2015-5237
CVSS v2.0
9.0
Alta
| Vetor | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
protobuf (affected versions not specified)
Description
The issue is related to a heap-based buffer overflow that can be caused by remote authenticated attackers. It is associated with an error in handling an integer variable during the compilation of the protobuf library. This can potentially allow a remote attacker to execute arbitrary code.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Memory Corruption
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Astra Linux
Debian
Ubuntu
Protobuf