CVE-2022-33070
CVE-2022-33070
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Protobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function parse_tag_and_wiretype in protobuf-c/protobuf-c.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors.
CVSS 5.5 · Medium · EPSS 1.1% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
protobuf-c Debian:12
- Affected ranges
- ECOSYSTEM: < 1.4.1-1
Update to 1.4.1-1
protobuf-c Debian:13
- Affected ranges
- ECOSYSTEM: < 1.4.1-1
Update to 1.4.1-1
protobuf-c Debian:14
- Affected ranges
- ECOSYSTEM: < 1.4.1-1
Update to 1.4.1-1
pidgin Ubuntu:14.04:LTS
- Versions
- 1:2.10.7-0ubuntu4.1
- 1:2.10.7-0ubuntu4.2
- 1:2.10.9-0ubuntu1
- 1:2.10.9-0ubuntu2
- 1:2.10.9-0ubuntu3
- 1:2.10.9-0ubuntu3.1
- 1:2.10.9-0ubuntu3.2
- 1:2.10.9-0ubuntu3.3
- 1:2.10.9-0ubuntu3.4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
protobuf-c Ubuntu:14.04:LTS
- Versions
- 0.14-1ubuntu1
- 0.15-1
- 0.15-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
argyll Ubuntu:16.04:LTS
- Versions
- 1.7.0+repack-4
- 1.8.2+repack-1
- 1.8.3+repack-1
- 1.8.3+repack-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libgadu Ubuntu:16.04:LTS
- Versions
- 1:1.12.1-2
- 1:1.12.1-2build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ocserv Ubuntu:16.04:LTS
- Versions
- 0.10.7-1
- 0.10.10-1
- 0.10.10-1ubuntu1
- 0.10.11-1
- 0.10.11-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
pidgin Ubuntu:16.04:LTS
- Versions
- 1:2.10.11-0ubuntu4
- 1:2.10.11-0ubuntu5
- 1:2.10.12-0ubuntu1
- 1:2.10.12-0ubuntu2
- 1:2.10.12-0ubuntu3
- 1:2.10.12-0ubuntu4
- 1:2.10.12-0ubuntu5
- 1:2.10.12-0ubuntu5.1
- 1:2.10.12-0ubuntu5.2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
protobuf-c Ubuntu:16.04:LTS
- Versions
- 1.0.2-1build2
- 1.1.1-1
- 1.2.1-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
argyll Ubuntu:18.04:LTS
- Versions
- 1.9.2+repack-1
- 1.9.2+repack-2
- 2.0.0+repack-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libgadu Ubuntu:18.04:LTS
- Versions
- 1:1.12.2-2
- 1:1.12.2-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libsignal-protocol-c Ubuntu:18.04:LTS
- Versions
- 2.3.1+git20171007-2
- 2.3.1+git20171007-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ocserv Ubuntu:18.04:LTS
- Versions
- 0.11.6-2
- 0.11.9-1
- 0.11.9-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
pidgin Ubuntu:18.04:LTS
- Versions
- 1:2.12.0-1ubuntu2
- 1:2.12.0-1ubuntu4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
protobuf-c Ubuntu:18.04:LTS
- Versions
- 1.2.1-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
protobuf-c Ubuntu:20.04:LTS
- Versions
- 1.3.1-1build1
- 1.3.2-1
- 1.3.3-1
- Affected ranges
- ECOSYSTEM: < 1.3.3-1ubuntu0.1
Update to 1.3.3-1ubuntu0.1
argyll Ubuntu:20.04:LTS
- Versions
- 2.0.1+repack-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ccextractor Ubuntu:20.04:LTS
- Versions
- 0.87+ds1-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libgadu Ubuntu:20.04:LTS
- Versions
- 1:1.12.2-3
- 1:1.12.2-4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libsignal-protocol-c Ubuntu:20.04:LTS
- Versions
- 2.3.2-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ocserv Ubuntu:20.04:LTS
- Versions
- 0.12.2-3build1
- 0.12.2-3build2
- 0.12.5-1
- 0.12.6-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
pidgin Ubuntu:20.04:LTS
- Versions
- 1:2.13.0-2.2ubuntu1
- 1:2.13.0-2.2ubuntu2
- 1:2.13.0-2.2ubuntu3
- 1:2.13.0-2.2ubuntu4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published