An issue was discovered in GoGo Protobuf before 1.3.2. plugin/unmarshal/unmarshal.go lacks certain index validation, aka the "skippy peanut butter" issue.
CVSS Details
- CVSS 3.1 Base Score: 8.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade protobuf-c | Aug 22, 2024 | Jan 11, 2021 |
| Debian | — | Upgrade golang-gogoprotobuf | Jul 30, 2024 | Jan 11, 2021 |
| Redhat Openshift | — | Upgrade windows-machine-config-rhel8-operatorUpgrade openshiftUpgrade cri-oUpgrade openshift-clientsUpgrade cri-tools | Feb 25, 2021 | Jan 11, 2021 |
| Ubuntu | — | Upgrade golang-gogoprotobuf | Nov 19, 2024 | Jan 11, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub