CVE-2021-3121

gogo/protobuf: plugin/unmarshal/unmarshal.go lacks certain index validation

Published Jan 11, 2021 CVSS 3.1 · 8.6 High EPSS 3.4% KEV · Not listed
Description
An issue was discovered in GoGo Protobuf before 1.3.2. plugin/unmarshal/unmarshal.go lacks certain index validation, aka the "skippy peanut butter" issue.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2022-1401 An issue was discovered in GoGo Protobuf before 1.3.2. plugin/unmarshal/unmarshal.go lacks certain index validation, aka the "skippy peanut butter" issue.
Github GHSA Github GHSA GHSA-c3h9-896r-86jm Improper Input Validation in GoGo Protobuf
History
Type Values Removed Values Added
Metrics epss

{'score': 0.00105}

epss

{'score': 0.00115}