VDB
BDU%3A2024-04129
BDU%3A2024-04129
PUBLISHED
CVSS 7.599999904632568 HIGH
Уязвимость функции JsonToBinaryStream() протокола сериализации данных на языке программирования C Protobuf, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 3.1
7.599999904632568
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| protocolbuffers | protobuf | 4.22.0 |
| protobuf | 4.22.0 | |
| Red Hat Inc., Google Inc | Red Hat OpenStack Platform, Protobuf |
Timeline
- May 3, 2024 CVE Published
- May 27, 2024 CVE Updated
References
- https://github.com/protocolbuffers/protobuf/commit/b955165ebdcc5a8ba9c267230d6305f4e3d9c118 url
- https://access.redhat.com/security/cve/CVE-2024-2410 advisory
- https://github.com/advisories/GHSA-h86c-v8g6-46f2 url
- https://safe-surf.ru/upload/VULN-new/VULN.2024-05-13.1.pdf url
- https://github.com/protocolbuffers/protobuf/releases/tag/v25.0 url