CVE-2022-48468: vulnerability facts

CVE-2022-48468

This page contains facts from public vulnerability sources. Check the original advisory before updating.

protobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member.

CVSS 5.5 · Medium · EPSS 0.4% · Fix available

Stack: system

Affected products and versions

n/a
Versions
- n/a: Affected
No fix published
libsignal-protocol-c Debian:12
Affected ranges
- ECOSYSTEM: < 2.3.3-3
Update to 2.3.3-3
libsignal-protocol-c Debian:13
Affected ranges
- ECOSYSTEM: < 2.3.3-3
Update to 2.3.3-3
libsignal-protocol-c Debian:14
Affected ranges
- ECOSYSTEM: < 2.3.3-3
Update to 2.3.3-3
protobuf-c Debian:12
Affected ranges
- ECOSYSTEM: < 1.4.1-1
Update to 1.4.1-1
protobuf-c Debian:13
Affected ranges
- ECOSYSTEM: < 1.4.1-1
Update to 1.4.1-1
protobuf-c Debian:14
Affected ranges
- ECOSYSTEM: < 1.4.1-1
Update to 1.4.1-1
protobuf-c Ubuntu:14.04:LTS
Versions
- 0.14-1ubuntu1
- 0.15-1
- 0.15-1build1
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
protobuf-c Ubuntu:16.04:LTS
Versions
- 1.0.2-1build2
- 1.1.1-1
- 1.2.1-1
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
protobuf-c Ubuntu:18.04:LTS
Versions
- 1.2.1-2
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
protobuf-c Ubuntu:20.04:LTS
Versions
- 1.3.1-1build1
- 1.3.2-1
- 1.3.3-1
- 1.3.3-1ubuntu0.1
- 1.3.3-1ubuntu0.3
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
protobuf-c Ubuntu:22.04:LTS
Versions
- 1.3.3-1build2
- 1.3.3-1ubuntu1
- 1.3.3-1ubuntu2
- 1.3.3-1ubuntu2.1
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published