Denial Of Service (DoS)

2023-01-2002:30:31

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

protobuf

vulnerability

denial of service

garbage collection

0.001 Low

EPSS

Percentile

33.6%

JSON

protobuf is vulnerable to Denial Of Service (DoS). The vulnerability is due to multiple instances of non-repeated embedded message inputs with repeated or unknown fields which cause the objects to be converted back-n-forth between mutable and immutable forms, resulting in potentially long garbage collection pauses.

CPENameOperatorVersion
protocol buffers [core]le3.20.2
protocol buffers [core]le3.16.1
protocol buffers [core]le3.19.5
protocol buffers [core]le3.21.6
protocol buffers [lite]le3.20.2
protocol buffers [lite]le3.16.1
protocol buffers [lite]le3.19.5
protocol buffers [lite]le3.21.6
google-protobufle3.20.2
google-protobufle3.19.5

Name	Operator	Version
protocol buffers [core]	le	3.20.2
protocol buffers [core]	le	3.16.1
protocol buffers [core]	le	3.19.5
protocol buffers [core]	le	3.21.6
protocol buffers [lite]	le	3.20.2
protocol buffers [lite]	le	3.16.1
protocol buffers [lite]	le	3.19.5
protocol buffers [lite]	le	3.21.6
google-protobuf	le	3.20.2
google-protobuf	le	3.19.5