Uh oh!
There was an error while loading.Please reload this page.
- Notifications
You must be signed in to change notification settings - Fork98
Closed
Description
Crash due to uncontrolled recursion in protobuf crate
Details | |
---|---|
Package | protobuf |
Version | 2.28.0 |
URL | stepancheg/rust-protobuf#749 |
Date | 2024-12-12 |
Affected version of this crate did not properly parse unknown fields when parsing a user-supplied input.
This allows an attacker to cause a stack overflow when parsing the mssage on untrusted data.
Seeadvisory page for additional details.