RUSTSEC-2024-0437: Crash due to uncontrolled recursion in protobuf crate #5067
Description
Crash due to uncontrolled recursion in protobuf crate
| Details | |
|---|---|
| Package | protobuf |
| Version | 2.28.0 |
| URL | stepancheg/rust-protobuf#749 |
| Date | 2024-12-12 |
| Patched versions | >=3.7.2 |
Affected version of this crate did not properly parse unknown fields when parsing a user-supplied input.
This allows an attacker to cause a stack overflow when parsing the mssage on untrusted data.
See advisory page for additional details.