CVE-2022-48468

2023-04-1321:15:07

Debian Security Bug Tracker

security-tracker.debian.org

protobuf-c vulnerability integer overflow unix

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

5.1%

JSON

protobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member.

OSVersionArchitecturePackageVersionFilename
Debian12alllibsignal-protocol-c< 2.3.3-3libsignal-protocol-c_2.3.3-3_all.deb
Debian11alllibsignal-protocol-c<= 2.3.3-1+deb11u1libsignal-protocol-c_2.3.3-1+deb11u1_all.deb
Debian999alllibsignal-protocol-c< 2.3.3-3libsignal-protocol-c_2.3.3-3_all.deb
Debian13alllibsignal-protocol-c< 2.3.3-3libsignal-protocol-c_2.3.3-3_all.deb
Debian12allprotobuf-c< 1.4.1-1protobuf-c_1.4.1-1_all.deb
Debian11allprotobuf-c<= 1.3.3-1protobuf-c_1.3.3-1_all.deb
Debian999allprotobuf-c< 1.4.1-1protobuf-c_1.4.1-1_all.deb
Debian13allprotobuf-c< 1.4.1-1protobuf-c_1.4.1-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	libsignal-protocol-c	< 2.3.3-3	libsignal-protocol-c_2.3.3-3_all.deb
Debian	11	all	libsignal-protocol-c	<= 2.3.3-1+deb11u1	libsignal-protocol-c_2.3.3-1+deb11u1_all.deb
Debian	999	all	libsignal-protocol-c	< 2.3.3-3	libsignal-protocol-c_2.3.3-3_all.deb
Debian	13	all	libsignal-protocol-c	< 2.3.3-3	libsignal-protocol-c_2.3.3-3_all.deb
Debian	12	all	protobuf-c	< 1.4.1-1	protobuf-c_1.4.1-1_all.deb
Debian	11	all	protobuf-c	<= 1.3.3-1	protobuf-c_1.3.3-1_all.deb
Debian	999	all	protobuf-c	< 1.4.1-1	protobuf-c_1.4.1-1_all.deb
Debian	13	all	protobuf-c	< 1.4.1-1	protobuf-c_1.4.1-1_all.deb