CVE-2023-24535
2 advisories.
Go/google.golang.org/protobuf CVE-2023-24535: high 7.5
google.golang.org/protobuf vulnerable to panic leading to denial of service
Action: Upgrade google.golang.org/protobuf to 1.29.1 or later.
go get google.golang.org/protobuf@v1.29.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.29.0 | 1.29.1 | - |
Fixed versions
| 1.29.1 |
Sources
- osv: GHSA-hw7c-3rfg-p46j
- https://nvd.nist.gov/vuln/detail/CVE-2023-24535
- https://github.com/golang/protobuf/issues/1530
- https://github.com/golang/protobuf
- https://go.dev/cl/475995
- https://pkg.go.dev/vuln/GO-2023-1631
CVE-2023-24535 · published · modified · JSON
Go/google.golang.org/protobuf CVE-2023-24535: unknown
Panic when parsing invalid messages in google.golang.org/protobuf
Action: Upgrade google.golang.org/protobuf to 1.29.1 or later.
go get google.golang.org/protobuf@v1.29.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.29.0 | 1.29.1 | - |
Fixed versions
| 1.29.1 |
Sources
CVE-2023-24535 · published · modified · JSON