Product

debian/protobuf-c vulnerabilities

2 published CVES affecting debian/protobuf-c, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 2
Critical: 0
High: 0
Medium: 2
Low: 0
Unscored: 0
CISA KEV: 0

Latest debian/protobuf-c CVEs

Newest publication first

CVE-2022-48468 protobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member.
Published 2023-04-13

MediumCVSS 5.5 EPSS 0.37%

protobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member.
CVE-2022-33070 Protobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function parse_tag_and_wiretype in protobuf-c/protobuf-c.c. This vulnerability allows attackers to cause a Denial of Ser...
Published 2022-06-22

MediumCVSS 5.5 EPSS 1.1%

Protobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function parse_tag_and_wiretype in protobuf-c/protobuf-c.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

debian/protobuf-c vulnerabilities

Latest debian/protobuf-c CVEs

CVE-2022-48468 protobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member.

CVE-2022-33070 Protobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function parse_tag_and_wiretype in protobuf-c/protobuf-c.c. This vulnerability allows attackers to cause a Denial of Ser...