CVE-2019-15544
High
Description
An issue was discovered in the protobuf crate before 2.6.0 for Rust. Attackers can exhaust all memory via Vec::reserve calls.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Rust-protobuf
PublishedAug 26, 2019
First seenAug 26, 2019
How to fix
Update
- rust-protobuf_project rust-protobuf1.7.5, 2.6.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rust-protobuf_project rust-protobuf | v < 1.7.5, 2.0.0 ≤ v < 2.6.0 | 1.7.5, 2.6.0 |
| apache hbase | 2.2.3 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.