Open
Description
Crash due to uncontrolled recursion in protobuf crate
Details | |
---|---|
Package | protobuf |
Version | 2.28.0 |
URL | stepancheg/rust-protobuf#749 |
Date | 2024-12-12 |
Affected version of this crate did not properly parse unknown fields when parsing a user-supplied input.
This allows an attacker to cause a stack overflow when parsing the mssage on untrusted data.
See advisory page for additional details.
Metadata
Metadata
Assignees
Labels
No labels
Type
Projects
Status
Triage needed