CVE-2022-33070

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2022-33070

CGA ID

CGA-wx68-34c2-vmwx

Severity

5.5

Medium

CVSS V3

Description

Protobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function parse_tag_and_wiretype in protobuf-c/protobuf-c.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors.

References

Affected packages

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™

Media Kit Contact Us

Private Policy

CVE-2022-33070

Severity

Description

References

Affected packages

Product

Why Chainguard

Customers

Company

Resources