Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Hrsakai

#28199of 53,633
9Total CVSS
Vulnerabilities · 1
PT-2020-6441
9.0
2020-08-07
Unknown · Gogo Protobuf · CVE-2021-3121
**Name of the Vulnerable Software and Affected Versions** GoGo Protobuf versions prior to 1.3.2 **Description** The issue is related to improper index validation in the `unmarshal.go` file of the GoGo Protobuf library, which can lead to an out-of-bounds panic when parsing maliciously crafted input. This may be used as a denial of service vector if messages are parsed from untrusted parties. The issue affects the confidentiality, integrity, and availability of protected information. **Recommendations** For versions prior to 1.3.2, update to version 1.3.2 or later to resolve the issue. As a temporary workaround, consider restricting the use of the `Unmarshal` methods when parsing messages from untrusted parties to minimize the risk of exploitation.