CVE-2020-5234

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-5234
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-5234.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-5234
Aliases
Related
Published
2020-01-31T18:15:11.860Z
Modified
2026-04-10T04:27:37.304588Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

MessagePack for C# and Unity before version 1.9.11 and 2.1.90 has a vulnerability where untrusted data can lead to DoS attack due to hash collisions and stack overflow. Review the linked GitHub Security Advisory for more information and remediation steps.

References

Affected packages

Git / github.com/messagepack-csharp/messagepack-csharp

Affected ranges

Type
GIT
Repo
https://github.com/messagepack-csharp/messagepack-csharp
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
56fa86219d01d0a183babbbbcb34abbdea588a02
Fixed
f88684078698386df02204f13faeff098a61f007
Type
GIT
Repo
https://github.com/neuecc/messagepack-csharp
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
129239b10751dd3815610aaac09ca8420c15f881
Introduced
7f591effd1c85a8d2882b0d48ca772e64293581d
Fixed
6b89b9ad778e6c09f335d5807db6776f7105a046
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0a344fa81f225dd14feab4c85217c3368cfde1a7
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
78ea503f3aaf8c7f5f0b2230b4426f974a5693d0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
339c62440098d39635ed66b0b103e89d99c6a991
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
86d38b1df425f6e3e28c3463b0979bc57fe1887a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f0b0a9a9a6c27ab6a6cc295d42010edcc22f68ec
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8ddfe632454721878a4cb250ae402b63564bfdaa
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1cc149cbc9b8cbdc1fdb9e7cd688181f16034675
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.9.3"
        },
        {
            "introduced": "2.0.323"
        },
        {
            "fixed": "2.1.80"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.94-alpha"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.110-alpha"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.119-beta"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.123-beta"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.204-beta"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.270-rc"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.299-rc"
        }
    ]
}

Affected versions

0.*
0.1.0-beta
0.2.0-beta
1.*
1.0.1
v.*
v.1.7.3.5
v.1.7.3.6
v1.*
v1.0.2
v1.0.3
v1.1.1
v1.1.2
v1.2.0
v1.2.1
v1.2.3
v1.3.0
v1.3.1
v1.3.2
v1.3.3
v1.4.0
v1.4.1
v1.4.2
v1.4.4
v1.5.0
v1.5.1
v1.6.0
v1.6.1
v1.6.1.2
v1.6.2
v1.7.0
v1.7.2
v1.7.3
v1.7.3.1
v1.7.3.2
v1.7.3.3
v1.7.3.4
v1.8.71-beta
v1.8.74
v1.8.80
v2.*
v2.0.110-alpha
v2.0.119-beta
v2.0.123-beta
v2.0.204-beta
v2.0.270-rc
v2.0.299-rc
v2.0.94-alpha
v2.1.80

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-5234.json"