Lucene search
AmazonALAS2-2023-1931HistoryFeb 03, 2023 - 7:19 p.m.
Medium: protobuf
2023-02-0319:19:00
alas.aws.amazon.com
7
protobuf
parsing
null pointer
code execution
memory read
memory modification
cve-2021-22570
0.0004 Low
EPSS
Percentile
16.1%
Issue Overview:
A flaw was found in protobuf. The vulnerability occurs due to incorrect parsing of a NULL character in the proto symbol and leads to a Null pointer dereference. This flaw allows an attacker to execute unauthorized code or commands, read memory, modify memory. (CVE-2021-22570)
Affected Packages:
protobuf
Issue Correction:
pkg_manager = 'yum’Run _ update protobuf_ to update your system.
New Packages:
aarch64:
protobuf-2.5.0-8.amzn2.0.3.aarch64
protobuf-compiler-2.5.0-8.amzn2.0.3.aarch64
protobuf-devel-2.5.0-8.amzn2.0.3.aarch64
protobuf-static-2.5.0-8.amzn2.0.3.aarch64
protobuf-lite-2.5.0-8.amzn2.0.3.aarch64
protobuf-lite-devel-2.5.0-8.amzn2.0.3.aarch64
protobuf-lite-static-2.5.0-8.amzn2.0.3.aarch64
protobuf-python-2.5.0-8.amzn2.0.3.aarch64
protobuf-vim-2.5.0-8.amzn2.0.3.aarch64
protobuf-emacs-2.5.0-8.amzn2.0.3.aarch64
protobuf-emacs-el-2.5.0-8.amzn2.0.3.aarch64
protobuf-java-2.5.0-8.amzn2.0.3.aarch64
protobuf-javadoc-2.5.0-8.amzn2.0.3.aarch64
protobuf-debuginfo-2.5.0-8.amzn2.0.3.aarch64
i686:
protobuf-2.5.0-8.amzn2.0.3.i686
protobuf-compiler-2.5.0-8.amzn2.0.3.i686
protobuf-devel-2.5.0-8.amzn2.0.3.i686
protobuf-static-2.5.0-8.amzn2.0.3.i686
protobuf-lite-2.5.0-8.amzn2.0.3.i686
protobuf-lite-devel-2.5.0-8.amzn2.0.3.i686
protobuf-lite-static-2.5.0-8.amzn2.0.3.i686
protobuf-python-2.5.0-8.amzn2.0.3.i686
protobuf-vim-2.5.0-8.amzn2.0.3.i686
protobuf-emacs-2.5.0-8.amzn2.0.3.i686
protobuf-emacs-el-2.5.0-8.amzn2.0.3.i686
protobuf-java-2.5.0-8.amzn2.0.3.i686
protobuf-javadoc-2.5.0-8.amzn2.0.3.i686
protobuf-debuginfo-2.5.0-8.amzn2.0.3.i686
src:
protobuf-2.5.0-8.amzn2.0.3.src
x86_64:
protobuf-2.5.0-8.amzn2.0.3.x86_64
protobuf-compiler-2.5.0-8.amzn2.0.3.x86_64
protobuf-devel-2.5.0-8.amzn2.0.3.x86_64
protobuf-static-2.5.0-8.amzn2.0.3.x86_64
protobuf-lite-2.5.0-8.amzn2.0.3.x86_64
protobuf-lite-devel-2.5.0-8.amzn2.0.3.x86_64
protobuf-lite-static-2.5.0-8.amzn2.0.3.x86_64
protobuf-python-2.5.0-8.amzn2.0.3.x86_64
protobuf-vim-2.5.0-8.amzn2.0.3.x86_64
protobuf-emacs-2.5.0-8.amzn2.0.3.x86_64
protobuf-emacs-el-2.5.0-8.amzn2.0.3.x86_64
protobuf-java-2.5.0-8.amzn2.0.3.x86_64
protobuf-javadoc-2.5.0-8.amzn2.0.3.x86_64
protobuf-debuginfo-2.5.0-8.amzn2.0.3.x86_64
Additional References
Red Hat: CVE-2021-22570
Mitre: CVE-2021-22570
Related
nessus
nessus
EulerOS 2.0 SP9 : protobuf (EulerOS-SA-2022-1851)
2022-06-15 00:00:00
Amazon Linux 2022 : (ALAS2022-2022-098)
2022-09-06 00:00:00
osv
osv
protobuf vulnerability
2022-06-21 20:47:39
CVE-2021-22570
2022-01-26 14:15:08
Moderate: protobuf security update
2022-11-15 06:12:20
openvas
openvas
Huawei EulerOS: Security Advisory for protobuf (EulerOS-SA-2022-1797)
2022-06-07 00:00:00
Huawei EulerOS: Security Advisory for protobuf (EulerOS-SA-2022-2279)
2022-08-18 00:00:00
Huawei EulerOS: Security Advisory for protobuf (EulerOS-SA-2022-2188)
2022-08-01 00:00:00
alpinelinux
alpinelinux
CVE-2021-22570
2022-01-26 14:15:00
suse
suse
Security update for protobuf (moderate)
2022-03-14 00:00:00
Security update for protobuf (moderate)
2022-03-30 00:00:00
veracode
veracode
Denial Of Service (DoS)
2022-11-19 00:46:21
redhat
redhat
(RHSA-2022:7464) Moderate: protobuf security update
2022-11-08 06:20:13
(RHSA-2022:7970) Moderate: protobuf security update
2022-11-15 06:12:20
(RHSA-2024:3433) Moderate: protobuf security update
2024-05-28 13:22:24
github
github
NULL Pointer Dereference in Protocol Buffers
2022-01-27 00:01:15
amazon
amazon
Medium: protobuf
2023-02-17 00:11:00
Medium: protobuf
2023-01-31 20:44:00
debiancve
debiancve
CVE-2021-22570
2022-01-26 14:15:08
nvd
nvd
CVE-2021-22570
2022-01-26 14:15:08
ibm
ibm
fedora
fedora
[SECURITY] Fedora 35 Update: mingw-protobuf-3.14.0-4.fc35
2022-03-09 19:44:14
[SECURITY] Fedora 35 Update: protobuf-3.14.0-7.fc35
2022-02-16 01:28:54
[SECURITY] Fedora 34 Update: mingw-protobuf-3.14.0-4.fc34
2022-03-09 19:16:34
cvelist
cvelist
CVE-2021-22570 Nullptr Dereference in Protobuf
2022-01-26 00:00:00
cgr
cgr
CVE-2021-22570 vulnerabilities
2024-05-19 03:07:16
cve
cve
CVE-2021-22570
2022-01-26 14:15:08
oraclelinux
oraclelinux
protobuf security update
2022-11-15 00:00:00
protobuf security update
2022-11-22 00:00:00
redhatcve
redhatcve
CVE-2021-22570
2022-02-02 10:05:39
rocky
rocky
protobuf security update
2022-11-08 06:20:13
protobuf security update
2022-11-15 06:12:20
prion
prion
Design/Logic Flaw
2022-01-26 14:15:00
cbl_mariner
cbl_mariner
CVE-2021-22570 affecting package mysql for versions less than 8.0.29-1
2022-07-01 21:02:51
CVE-2021-22570 affecting package protobuf 3.14.0-1
2024-06-29 09:08:29
ubuntucve
ubuntucve
CVE-2021-22570
2022-01-26 00:00:00
almalinux
almalinux
Moderate: protobuf security update
2022-11-08 00:00:00
Moderate: protobuf security update
2022-11-15 00:00:00
ubuntu
ubuntu
Protocol Buffers vulnerability
2022-06-21 00:00:00
Protocol Buffers vulnerabilities
2023-03-13 00:00:00
wolfi
wolfi
CVE-2021-22570 vulnerabilities
2024-06-29 09:08:33
photon
photon
Critical Photon OS Security Update - PHSA-2022-0170
2022-04-07 00:00:00
Important Photon OS Security Update - PHSA-2022-4.0-0170
2022-04-07 00:00:00
Important Photon OS Security Update - PHSA-2022-3.0-0415
2022-07-07 00:00:00
debian
debian
[SECURITY] [DLA 3393-1] protobuf security update
2023-04-18 07:12:21
altlinux
altlinux
Security fix for the ALT Linux 10 package MySQL version 8.0.29-alt1
2022-07-05 00:00:00
freebsd
freebsd
MySQL -- Multiple vulnerabilities
2022-04-16 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00