VDB

RHSA-2021:3259

RHSA-2021:3259 PUBLISHED CVSS 8.600000381469727 HIGH

A flaw was found in github.com/gogo/protobuf before 1.3.2 that allows an out-of-bounds access when unmarshalling certain protobuf objects. This flaw allows a remote attacker to send crafted protobuf messages, causing panic and resulting in a denial of service. The highest threat from this vulnerability is to availability.

Risk Scores

CVSS 3.1
8.600000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Affected Products

VendorProductVersions
Red Hatcontainer-native-virtualization/vm-import-operator-rhel8@sha256:d67d7f44d27a714c17cd32c5eac7273bd95e3006cc11a3746831c9d9d9233d0f_amd64 as a component of CNV 4.8 for RHEL 8container-native-virtualization/vm-import-operator-rhel8@sha256:d67d7f44d27a714c17cd32c5eac7273bd95e3006cc11a3746831c9d9d9233d0f_amd64

Timeline

  • Aug 24, 2021 CVE Published
  • Mar 27, 2026 CVE Updated
  • May 1, 2026 Distribution Patch
  • May 1, 2026 Distribution Patch
  • May 1, 2026 Security Advisory
  • May 1, 2026 Security Advisory
  • May 1, 2026 Security Advisory

References

…and 11 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›