CVE-2020-5234

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-5234
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-5234.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-5234
Aliases
Published
2020-01-31T18:15:11.860Z
Modified
2026-08-27T08:40:28.601814Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

MessagePack for C# and Unity before version 1.9.11 and 2.1.90 has a vulnerability where untrusted data can lead to DoS attack due to hash collisions and stack overflow. Review the linked GitHub Security Advisory for more information and remediation steps.

References

Affected packages

Git
github.com/MessagePack-CSharp/MessagePack-CSharp

Affected ranges

Type
GIT
Repo
https://github.com/MessagePack-CSharp/MessagePack-CSharp
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
129239b10751dd3815610aaac09ca8420c15f881
Introduced
7f591effd1c85a8d2882b0d48ca772e64293581d
Fixed
6b89b9ad778e6c09f335d5807db6776f7105a046
Introduced
0a344fa81f225dd14feab4c85217c3368cfde1a7
Last affected
1cc149cbc9b8cbdc1fdb9e7cd688181f16034675
Database specific
Show details 
{
    "cpe": [
        "cpe:2.3:a:messagepack:messagepack:*:*:*:*:*:c\\#:*:*",
        "cpe:2.3:a:messagepack:messagepack:2.0.94:alpha:*:*:*:c\\#:*:*",
        "cpe:2.3:a:messagepack:messagepack:2.0.110:alpha:*:*:*:c\\#:*:*",
        "cpe:2.3:a:messagepack:messagepack:2.0.119:beta:*:*:*:c\\#:*:*",
        "cpe:2.3:a:messagepack:messagepack:2.0.123:beta:*:*:*:c\\#:*:*",
        "cpe:2.3:a:messagepack:messagepack:2.0.204:beta:*:*:*:c\\#:*:*",
        "cpe:2.3:a:messagepack:messagepack:2.0.270:rc:*:*:*:c\\#:*:*",
        "cpe:2.3:a:messagepack:messagepack:2.0.299:rc:*:*:*:c\\#:*:*"
    ],
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.9.3"
        },
        {
            "introduced": "2.0.323"
        },
        {
            "fixed": "2.1.80"
        },
        {
            "introduced": "2.0.94-alpha"
        },
        {
            "last_affected": "2.0.94-alpha"
        },
        {
            "introduced": "2.0.110-alpha"
        },
        {
            "last_affected": "2.0.110-alpha"
        },
        {
            "introduced": "2.0.119-beta"
        },
        {
            "last_affected": "2.0.119-beta"
        },
        {
            "introduced": "2.0.123-beta"
        },
        {
            "last_affected": "2.0.123-beta"
        },
        {
            "introduced": "2.0.204-beta"
        },
        {
            "last_affected": "2.0.204-beta"
        },
        {
            "introduced": "2.0.270-rc"
        },
        {
            "last_affected": "2.0.270-rc"
        },
        {
            "introduced": "2.0.299-rc"
        },
        {
            "last_affected": "2.0.299-rc"
        }
    ]
}

Affected versions

0.*
0.1.0-beta
0.2.0-beta
1.*
1.0.1
2.*
2.0.110-alpha
2.0.119-beta
2.0.123-beta
2.0.204-beta
2.0.270-rc
2.0.299-rc
2.0.94-alpha
v.*
v.1.7.3.5
v.1.7.3.6
v1.*
v1.0.2
v1.0.3
v1.1.1
v1.1.2
v1.2.0
v1.2.1
v1.2.3
v1.3.0
v1.3.1
v1.3.2
v1.3.3
v1.4.0
v1.4.1
v1.4.2
v1.4.4
v1.5.0
v1.5.1
v1.6.0
v1.6.1
v1.6.1.2
v1.6.2
v1.7.0
v1.7.2
v1.7.3
v1.7.3.1
v1.7.3.2
v1.7.3.3
v1.7.3.4
v1.8.71-beta
v1.8.74
v1.8.80
v2.*
v2.0.110-alpha
v2.0.119-beta
v2.0.123-beta
v2.0.204-beta
v2.0.270-rc
v2.0.299-rc
v2.0.94-alpha

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-5234.json"
github.com/messagepack-csharp/messagepack-csharp

Affected ranges

Type
GIT
Repo
https://github.com/messagepack-csharp/messagepack-csharp
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
129239b10751dd3815610aaac09ca8420c15f881
Introduced
7f591effd1c85a8d2882b0d48ca772e64293581d
Fixed
6b89b9ad778e6c09f335d5807db6776f7105a046
Introduced
0a344fa81f225dd14feab4c85217c3368cfde1a7
Last affected
1cc149cbc9b8cbdc1fdb9e7cd688181f16034675
Fixed
56fa86219d01d0a183babbbbcb34abbdea588a02
Fixed
f88684078698386df02204f13faeff098a61f007
Database specific
Show details 
{
    "cpe": [
        "cpe:2.3:a:messagepack:messagepack:*:*:*:*:*:c\\#:*:*",
        "cpe:2.3:a:messagepack:messagepack:2.0.94:alpha:*:*:*:c\\#:*:*",
        "cpe:2.3:a:messagepack:messagepack:2.0.110:alpha:*:*:*:c\\#:*:*",
        "cpe:2.3:a:messagepack:messagepack:2.0.119:beta:*:*:*:c\\#:*:*",
        "cpe:2.3:a:messagepack:messagepack:2.0.123:beta:*:*:*:c\\#:*:*",
        "cpe:2.3:a:messagepack:messagepack:2.0.204:beta:*:*:*:c\\#:*:*",
        "cpe:2.3:a:messagepack:messagepack:2.0.270:rc:*:*:*:c\\#:*:*",
        "cpe:2.3:a:messagepack:messagepack:2.0.299:rc:*:*:*:c\\#:*:*"
    ],
    "source": [
        "CPE_RANGE",
        "CPE_STRING",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.9.3"
        },
        {
            "introduced": "2.0.323"
        },
        {
            "fixed": "2.1.80"
        },
        {
            "introduced": "2.0.94-alpha"
        },
        {
            "last_affected": "2.0.94-alpha"
        },
        {
            "introduced": "2.0.110-alpha"
        },
        {
            "last_affected": "2.0.110-alpha"
        },
        {
            "introduced": "2.0.119-beta"
        },
        {
            "last_affected": "2.0.119-beta"
        },
        {
            "introduced": "2.0.123-beta"
        },
        {
            "last_affected": "2.0.123-beta"
        },
        {
            "introduced": "2.0.204-beta"
        },
        {
            "last_affected": "2.0.204-beta"
        },
        {
            "introduced": "2.0.270-rc"
        },
        {
            "last_affected": "2.0.270-rc"
        },
        {
            "introduced": "2.0.299-rc"
        },
        {
            "last_affected": "2.0.299-rc"
        }
    ]
}

Affected versions

0.*
0.1.0-beta
0.2.0-beta
1.*
1.0.1
2.*
2.0.110-alpha
2.0.119-beta
2.0.123-beta
2.0.204-beta
2.0.270-rc
2.0.299-rc
2.0.94-alpha
v.*
v.1.7.3.5
v.1.7.3.6
v1.*
v1.0.2
v1.0.3
v1.1.1
v1.1.2
v1.2.0
v1.2.1
v1.2.3
v1.3.0
v1.3.1
v1.3.2
v1.3.3
v1.4.0
v1.4.1
v1.4.2
v1.4.4
v1.5.0
v1.5.1
v1.6.0
v1.6.1
v1.6.1.2
v1.6.2
v1.7.0
v1.7.2
v1.7.3
v1.7.3.1
v1.7.3.2
v1.7.3.3
v1.7.3.4
v1.8.71-beta
v1.8.74
v1.8.80
v2.*
v2.0.110-alpha
v2.0.119-beta
v2.0.123-beta
v2.0.204-beta
v2.0.270-rc
v2.0.299-rc
v2.0.94-alpha
v2.1.80

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-5234.json"