Denial of Service (DoS) vulnerability exists in the Protobuf PHP library during the parsing of untrusted input
Résumé
Denial of Service (DoS) vulnerability exists in the Protobuf PHP library during the parsing of untrusted input
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A Denial of Service (DoS) vulnerability exists in the Protobuf PHP library during the parsing of untrusted input. Maliciously structured messages—specifically those containing negative varints or deep recursion—can be used to crash the application, impacting service availability.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2026-6409 protobuf
- Ubuntu UBUNTU-CVE-2026-6409 protobuf
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov