PT-2025-25564 · Protobuf+6 · Protobuf+6
Published
2025-05-14
·
Updated
2026-03-18
·
CVE-2025-4565
CVSS v4.0
8.2
High
| Vector | AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Protobuf versions prior to 6.31.1
Description
The issue affects projects that use the Protobuf Pure-Python backend to parse untrusted Protocol Buffers data. This data can contain an arbitrary number of recursive groups, recursive messages, or a series of SGROUP tags, which can cause the application to exceed the Python recursion limit. As a result, this can lead to a Denial of Service by crashing the application with a RecursionError.
Recommendations
For versions prior to 6.31.1, upgrade to version 6.31.1 or beyond commit 17838beda2943d08b8a9d4df5b68f5f04f26d901 to resolve the issue.
Fix
DoS
Uncontrolled Recursion
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Protobuf
Red Os
Suse
Ubuntu