CVE-2021-22570

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-22570
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-22570.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-22570
Aliases
Downstream
AZL (1)
BELL (1)
CGA (20)
CLEANSTART (9)
DEBIAN (1)
OESA (2)
openSUSE (2)
RHSA (5)
RLSA (2)
ROOT (1)
SUSE (5)
UBUNTU (1)
Related
ALSA (2)
openSUSE (2)
SUSE (5)
Published
2022-01-26T14:15:08Z
Modified
2026-10-24T02:46:42Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error message. Since the symbol is incorrectly parsed, the file is nullptr. We recommend upgrading to version 3.15.0 or greater.

Database specific 
{
    "unresolved_ranges":  [
        {
            "cpes":  [
                "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "last_affected":  "8.0.28"
                        }
                    ],
                    "source":  "CPE_RANGE"
                }
            ],
            "vendor_product":  "oracle:mysql"
        },
        {
            "cpes":  [
                "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "introduced":  "9.0"
                        },
                        {
                            "last_affected":  "9.0"
                        },
                        {
                            "introduced":  "10.0"
                        },
                        {
                            "last_affected":  "10.0"
                        },
                        {
                            "introduced":  "11.0"
                        },
                        {
                            "last_affected":  "11.0"
                        }
                    ],
                    "source":  "CPE_STRING"
                }
            ],
            "vendor_product":  "debian:debian_linux"
        }
    ]
}
References

Affected packages

Git / github.com/protocolbuffers/protobuf

Affected ranges

Type
GIT
Repo
https://github.com/protocolbuffers/protobuf
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
ae50d9b9902526efd6c7a1907d09739f959c6297
Introduced
6a6cd88c262ffdb1738167a47d5fcc7a3eb4edac
Last Affected
b89250d7eabc94c3c865ea148ba5bfebc40a6fb6
Database specific
Show details 
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:google:protobuf:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "fixed":  "3.15.0"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "34"
                },
                {
                    "last_affected":  "34"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "35"
                },
                {
                    "last_affected":  "35"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "36"
                },
                {
                    "last_affected":  "36"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "original_tag":  "v3.15.0",
            "range":  [
                {
                    "fixed":  "ae50d9b9902526efd6c7a1907d09739f959c6297"
                }
            ],
            "source":  "REFERENCES_TAG"
        }
    ]
}

Affected versions

3.*
3.15.0-rc1
Other
34
35
36
v26-dev
v27-dev
v28-dev
v29-dev
v30-dev
v31-dev
v32-dev
v33-dev
v35-dev
v36-dev
rust-prerelease-4.*
rust-prerelease-4.30.0-beta1
rust-prerelease-4.31.0-beta1
v2.*
v2.6.0
v2.6.1rc1
v3.*
v3.0.0-alpha-3
v3.0.0-alpha-4
v3.0.0-beta-1
v3.0.0-beta-1-bzl-fix
v3.0.0-beta-2
v3.0.0-beta-3-pre-1
v3.12.3
v3.15.0-rc1
v3.15.0-rc2
v3.20.0-rc2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-22570.json"