2 lines
3.2 KiB
JSON
2 lines
3.2 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"protobuf","repo":"https://github.com/protocolbuffers/protobuf","vendor":"protocolbuffers","versions":[{"lessThan":"4.25.0","status":"affected","version":"4.22.0","versionType":"semver"}]}],"source":"cve-coordination@google.com"},{"affectedData":[{"cpes":["cpe:2.3:a:google:protobuf:-:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"protobuf","vendor":"google","versions":[{"lessThan":"4.25.0","status":"affected","version":"4.22.0","versionType":"semver"}]}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:google:protobuf:*:*:*:*:*:*:*:*","matchCriteriaId":"8069127C-4FD6-4E80-A84A-28090748ACFC","versionEndExcluding":"4.25.0","versionStartIncluding":"4.22.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"The JsonToBinaryStream() function is part of the protocol buffers C++ implementation and is used to parse JSON from a stream. If the input is broken up into separate chunks in a certain way, the parser will attempt to read bytes from a chunk that has already been freed. \n"},{"lang":"es","value":"La función JsonToBinaryStream() es parte de la implementación de los búferes de protocolo C++ y se utiliza para analizar JSON de una secuencia. Si la entrada se divide en fragmentos separados de cierta manera, el analizador intentará leer bytes de un fragmento que ya ha sido liberado."}],"id":"CVE-2024-2410","lastModified":"2026-06-17T07:24:28.823","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":7.6,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L","version":"3.1"},"exploitabilityScore":2.8,"impactScore":4.7,"source":"cve-coordination@google.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-2410","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2024-06-13T16:52:45.662270Z","version":"2.0.3"}}]},"published":"2024-05-03T13:15:21.700","references":[{"source":"cve-coordination@google.com","tags":["Release Notes"],"url":"https://github.com/protocolbuffers/protobuf/releases/tag/v25.0"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"],"url":"https://github.com/protocolbuffers/protobuf/releases/tag/v25.0"}],"sourceIdentifier":"cve-coordination@google.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"cve-coordination@google.com","type":"Secondary"}]}
|