Fluid Attacks Database

Description

protobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
debian 13	libsignal-protocol-c	>=0 <2.3.3-3	2.3.3-3
debian 12	protobuf-c	>=0 <1.4.1-1	1.4.1-1
debian 12	libsignal-protocol-c	>=0 <2.3.3-3	2.3.3-3
debian 14	libsignal-protocol-c	>=0 <2.3.3-3	2.3.3-3
debian 13	protobuf-c	>=0 <1.4.1-1	1.4.1-1
debian 14	protobuf-c	>=0 <1.4.1-1	1.4.1-1
rpm rhel7	protobuf-c	-	-
rpm rhel8.6	protobuf-c	<0:1.3.0-8.el8_6	0:1.3.0-8.el8_6
rpm rhel8	protobuf-c	<0:1.3.0-8.el8	0:1.3.0-8.el8
rpm rhel8.8	protobuf-c	<0:1.3.0-8.el8_8	0:1.3.0-8.el8_8

1-10 of 11

Aliases

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.