google-protobuf [JRuby Gem]

2 results · Clear filters · Feed

• High 8.7
  CVE-2024-7254

  Stack overflow in Protocol Buffers Java Lite

  Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limit i.e. StackOverflow. Parsing nested groups as unknown fields with DiscardUnknownFieldsPar…

  Google protobuf-java google-protobuf [JRuby Gem] protobuf-kotlin Debian Ubuntu Maven RubyGems
  Sep 19, 2024
• High 7.5
  CVE-2021-22569 Public exploit

  Denial of Service of protobuf-java parsing procedure

  An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be processed out of order. A small malicious payload can occupy the parser for several minutes by creating large numbers of short-lived o…

  Google protobuf-kotlin protobuf-java google-protobuf [JRuby Gem] Debian Ubuntu Maven RubyGems
  Jan 7, 2022