漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Unbounded recursion in Python Protobuf
Vulnerability Description
Any project that uses Protobuf Pure-Python backend to parse untrusted Protocol Buffers data containing an arbitrary number of recursive groups, recursive messages or a series of SGROUP tags can be corrupted by exceeding the Python recursion limit. This can result in a Denial of service by crashing the application with a RecursionError. We recommend upgrading to version =>6.31.1 or beyond commit 17838beda2943d08b8a9d4df5b68f5f04f26d901
CVSS Information
N/A
Vulnerability Type
未经控制的递归
Vulnerability Title
Protobuf Pure-Python 安全漏洞
Vulnerability Description
Protobuf Pure-Python是Protobuf开源的一个谷歌的数据交换格式。 Protobuf Pure-Python存在安全漏洞,该漏洞源于解析递归数据时超过Python递归限制,可能导致拒绝服务攻击。
CVSS Information
N/A
Vulnerability Type
N/A