~ / search / GHSA-mh6h-f25p-98f8

GHSA-mh6h-f25p-98f8

Uncontrolled memory consumption in protobuf

Source: GitHub Advisory Database (reviewed) High CVE-2019-15544

Packages

EcosystemPackageAffectedFixed in
crates.io protobuf < 2.6.0 2.6.0

Details

As written in the advisory (Markdown source, shown as plain text).

Affected versions of this crate called Vec::reserve() on user-supplied input. This allows an attacker to cause an Out of Memory condition while calling the vulnerable method on untrusted data.

References

External links from the advisory. They lead to third-party sites.