Most recent entries from all

ALSA-2023:6621 — Moderate: protobuf-c security update

Affected: AlmaLinux:9: protobuf-c, AlmaLinux:9: protobuf-c-compiler, AlmaLinux:9: protobuf-c-devel

The protobuf-c packages provide C bindings for Google's Protocol Buffers.

Security Fix(es):

* protobuf-c: unsigned integer overflow in parse_required_member (CVE-2022-48468)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2023-03313

Withdrawn: BELL-CVE-2022-48468 — CVE-2022-48468 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2024-avi-0903 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

certfr-2024-avi-0903

EUVD-2026-216086

fkie_cve-2022-48468

protobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member.

GHSA-g29w-rp5q-p5vq

protobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member.

gsd-2022-48468

msrc_CVE-2022-48468 — protobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member.

msrc_CVE-2022-48468

OESA-2023-1255 — protobuf-c security update

Affected: openEuler:20.03-LTS-SP1: protobuf-c

This is protobuf-c, a C implementation of the Google Protocol Buffers data serialization format. Security Fix(es): protobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member.(CVE-2022-48468)

openSUSE-SU-2024:12885-1 — libprotobuf-c-devel-1.4.1-4.1 on GA media

libprotobuf-c-devel-1.4.1-4.1 on GA media

RHSA-2024:0406 — Red Hat Security Advisory: protobuf-c security update

protobuf-c: unsigned integer overflow in parse_required_member

RLSA-2023:6621 — Moderate: protobuf-c security update

Affected: Rocky Linux:9: protobuf-c

The protobuf-c packages provide C bindings for Google's Protocol Buffers.

Security Fix(es):

* protobuf-c: unsigned integer overflow in parse_required_member (CVE-2022-48468)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.3 Release Notes linked from the References section.

SUSE-SU-2023:1979-1 — Security update for protobuf-c

Security update for protobuf-c

UBUNTU-CVE-2022-48468

Affected: Ubuntu:14.04:LTS: protobuf-c, Ubuntu:16.04:LTS: protobuf-c, Ubuntu:18.04:LTS: protobuf-c, Ubuntu:20.04:LTS: protobuf-c, Ubuntu:22.04:LTS: protobuf-c

protobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member.

WID-SEC-W-2023-2853 — Red Hat Enterprise Linux: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, seine Privilegien zu erweitern, vertrauliche Informationen offenzulegen oder beliebigen Code auszuführen.