GHSA-77rm-9x9h-xj3g

Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/01/GHSA-77rm-9x9h-xj3g/GHSA-77rm-9x9h-xj3g.json
Aliases
Published
2022-01-27T00:01:15Z
Modified
2022-08-15T08:53:05.256472Z
Details

Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error message. Since the symbol is incorrectly parsed, the file is nullptr. We recommend upgrading to version 3.15.0 or greater.

References

Affected packages

NuGet / Google.Protobuf

Google.Protobuf

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0
Fixed
3.15.0

Affected versions

0.*

0.0.1-test1

3.*

3.0.0
3.0.0-alpha4
3.0.0-beta2
3.0.0-beta3
3.0.0-beta4
3.1.0
3.10.0
3.10.0-rc1
3.10.1
3.11.0-rc1
3.11.0-rc2
3.11.1
3.11.2
3.11.3
3.11.4
3.12.0
3.12.0-rc1
3.12.0-rc2
3.12.1
3.12.2
3.12.3
3.12.4
3.13.0
3.13.0-rc3
3.14.0
3.14.0-rc1
3.14.0-rc2
3.14.0-rc3
3.15.0-rc1
3.15.0-rc2
3.2.0
3.2.0-rc1
3.2.0-rc2
3.3.0
3.4.0
3.4.1
3.5.0
3.5.1
3.6.0
3.6.1
3.7.0
3.8.0
3.9.0
3.9.0-rc1
3.9.1
3.9.2

Packagist / google/protobuf

google/protobuf

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0
Fixed
3.15.0

Affected versions

Maven / com.google.protobuf:protobuf-parent

com.google.protobuf:protobuf-parent

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0
Fixed
3.15.0

Affected versions

3.*

3.0.0
3.0.0-beta-3
3.0.0-beta-4
3.0.2
3.1.0
3.10.0
3.10.0-rc-1
3.11.0
3.11.0-rc-1
3.11.0-rc-2
3.11.1
3.11.3
3.11.4
3.12.0
3.12.0-rc-1
3.12.0-rc-2
3.12.1
3.12.2
3.12.4
3.13.0
3.13.0-rc-3
3.14.0
3.14.0-rc-1
3.14.0-rc-2
3.14.0-rc-3
3.15.0-rc-1
3.15.0-rc-2
3.2.0
3.2.0-rc.1
3.2.0rc2
3.3.0
3.3.1
3.4.0
3.5.0
3.5.1
3.6.0
3.6.1
3.7.0
3.7.0-rc1
3.7.1
3.8.0
3.8.0-rc-1
3.9.0
3.9.0-rc-1
3.9.1
3.9.2

Go / github.com/protocolbuffers/protobuf

github.com/protocolbuffers/protobuf

Affected ranges

Type
SEMVER
Events
Introduced
0
Fixed
3.15.0

Affected versions

PyPI / protobuf

protobuf

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0
Fixed
3.15.0

Affected versions

2.*

2.0.0beta
2.0.3
2.3.0
2.4.1
2.5.0
2.6.0
2.6.1

3.*

3.0.0
3.0.0a2
3.0.0a3
3.0.0b1
3.0.0b1.post1
3.0.0b1.post2
3.0.0b2
3.0.0b2.post1
3.0.0b2.post2
3.0.0b3
3.0.0b4
3.1.0
3.1.0.post1
3.10.0
3.10.0rc1
3.11.0
3.11.0rc1
3.11.0rc2
3.11.1
3.11.2
3.11.3
3.12.0
3.12.0rc1
3.12.0rc2
3.12.1
3.12.2
3.12.4
3.13.0
3.13.0rc3
3.14.0
3.14.0rc1
3.14.0rc2
3.14.0rc3
3.15.0rc1
3.15.0rc2
3.2.0
3.2.0rc1
3.2.0rc1.post1
3.2.0rc2
3.3.0
3.4.0
3.5.0.post1
3.5.1
3.5.2
3.5.2.post1
3.6.0
3.6.1
3.7.0
3.7.0rc2
3.7.0rc3
3.7.1
3.8.0
3.8.0rc1
3.9.0
3.9.0rc1
3.9.1
3.9.2