CVE-2022-3509
2 advisories.
Maven/com.google.protobuf:protobuf-java CVE-2022-3509: high 7.5, EPSS 0.90%
Protobuf Java vulnerable to Uncontrolled Resource Consumption
Action: Upgrade com.google.protobuf:protobuf-java to 3.16.3 (3.16.x), 3.19.6 (3.19.x), 3.20.3 (3.20.x) or 3.21.7 (3.21.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 3.16.3 | - |
| 3.17.0 | 3.19.6 | - |
| 3.20.0 | 3.20.3 | - |
| 3.21.0 | 3.21.7 | - |
Fixed versions
| 3.16.3 | 3.19.6 | 3.20.3 | 3.21.7 |
Sources
- osv: GHSA-g5ww-5jh7-63cx
- https://nvd.nist.gov/vuln/detail/CVE-2022-3509
- https://github.com/protocolbuffers/protobuf/commit/a3888f53317a8018e7a439bac4abeb8f3425d5e9
- https://github.com/protocolbuffers/protobuf/blob/v2.6.1/java/core/src/main/java/com/google/protobuf/MessageReflection.java
- https://github.com/protocolbuffers/protobuf/blob/v3.0.0/java/core/src/main/java/com/google/protobuf/MessageReflection.java
- https://github.com/protocolbuffers/protobuf/tree/main/java
CVE-2022-3509 · published · modified · JSON
Maven/com.google.protobuf:protobuf-javalite CVE-2022-3509: high 7.5, EPSS 0.90%
Protobuf Java vulnerable to Uncontrolled Resource Consumption
Action: Upgrade com.google.protobuf:protobuf-javalite to 3.16.3 (3.16.x), 3.20.3 (3.20.x) or 3.21.7 (3.21.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.20.0 | 3.20.3 | - |
| 3.21.0 | 3.21.7 | - |
| 3.0.0 | 3.16.3 | - |
Fixed versions
| 3.20.3 | 3.21.7 | 3.16.3 |
Sources
- osv: GHSA-g5ww-5jh7-63cx#Maven/com.google.protobuf:protobuf-javalite
- https://nvd.nist.gov/vuln/detail/CVE-2022-3509
- https://github.com/protocolbuffers/protobuf/commit/a3888f53317a8018e7a439bac4abeb8f3425d5e9
- https://github.com/protocolbuffers/protobuf/blob/v2.6.1/java/core/src/main/java/com/google/protobuf/MessageReflection.java
- https://github.com/protocolbuffers/protobuf/blob/v3.0.0/java/core/src/main/java/com/google/protobuf/MessageReflection.java
- https://github.com/protocolbuffers/protobuf/tree/main/java
CVE-2022-3509 · published · modified · JSON