Alerts This Week
Warning Icon 1 1,154
Alerts This Week
Warning Icon 1 1,154

Ubuntu 24.10, 24.04, 22.04 LTS: USN-7435-1 critical: protobuf DoS

ubuntu
Calendar Grey April 14, 2025
Dist Ubuntu Esm H88
Be aware of potential failures in Protocol Buffers when dealing with specially designed input in Ubuntu versions. Ensure that your system is up to date.
Protocol Buffers could be made to crash if it received specially crafted input.

Summary

Protocol Buffers could be made to crash if it received specially crafted

input.

Software Description:

- protobuf: protocol buffers data serialization library

Details:

It was discovered that Protocol Buffers incorrectly handled memory when

receiving malicious input using the Java bindings. An attacker could

possibly use this issue to cause a denial of service.

Topics%20covered

Topics Covered

security advisory denial of service software update Ubuntu malicious input protocol buffers

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.10
   libprotobuf-java                3.21.12-9ubuntu1.1

Ubuntu 24.04 LTS
   libprotobuf-java                3.21.12-8.2ubuntu0.1

Ubuntu 22.04 LTS
   libprotobuf-java                3.12.4-1ubuntu7.22.04.2

In general, a standard system update will make all the necessary changes.

References

  https://ubuntu.com/security/notices/USN-7435-1

  CVE-2024-7254

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7435-1

Topics%20covered

Topics Covered

security advisory denial of service software update Ubuntu malicious input protocol buffers

Package Information

  https://launchpad.net/ubuntu/+source/protobuf/3.21.12-9ubuntu1.1
https://launchpad.net/ubuntu/+source/protobuf/3.21.12-8.2ubuntu0.1
https://launchpad.net/ubuntu/+source/protobuf/3.12.4-1ubuntu7.22.04.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here