OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2025-12-28 23:36:15 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #97 from gedigi/master

Browse Source 
Add protobuf out-of-memory vulnerability
This commit is contained in:
Tony Arcieri
2019-05-15 10:09:28 -07:00
committed by GitHub
parent 4c3b28dbac 1a8bf5bc41
commit c6e83777b7
1 changed files with 15 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
crates/protobuf/RUSTSEC-0000-0000.toml Normal file
View File

@@ -0,0 +1,15 @@
[advisory]
id = "RUSTSEC-0000-0000"
package = "protobuf"
date = "2018-06-08"
title = "Out of Memory in stream::read_raw_bytes_into()"
description = """
Affected versions of this crate called Vec::reserve() on user-supplied input.
This allows an attacker to cause an Out of Memory condition while calling the
vulnerable method on untrusted data.
"""
url = "https://github.com/stepancheg/rust-protobuf/issues/411"
keywords = ["oom", "panic", "dos"]
affected_functions = ["stream::read_raw_bytes_into"]
patched_versions = []