Vulnerabilities > CVE-2020-5234 - Out-of-bounds Write vulnerability in Messagepack

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

messagepack

CWE-787

NVD

Published: 2020-01-31

Updated: 2024-11-21

Summary

MessagePack for C# and Unity before version 1.9.11 and 2.1.90 has a vulnerability where untrusted data can lead to DoS attack due to hash collisions and stack overflow. Review the linked GitHub Security Advisory for more information and remediation steps.

Vulnerable Configurations

Part	Description	Count
Application	Messagepack Messagepack Messagepack 2.0.94 Messagepack Messagepack 2.0.110 Messagepack Messagepack 2.0.119 Messagepack Messagepack 2.0.123 Messagepack Messagepack 2.0.204 Messagepack Messagepack 2.0.270 Messagepack Messagepack 2.0.299 Messagepack Messagepack 2.0.323 Messagepack Messagepack 2.0.335 Messagepack Messagepack .1.7.3.5 Messagepack Messagepack .1.7.3.6 Messagepack Messagepack 1.0.1 Messagepack Messagepack 1.0.2 Messagepack Messagepack 1.0.3 Messagepack Messagepack 1.1.0 Messagepack Messagepack 1.1.1 Messagepack Messagepack 1.1.2 Messagepack Messagepack 1.2.0 Messagepack Messagepack 1.2.1 Messagepack Messagepack 1.2.3 Messagepack Messagepack 1.3.0 Messagepack Messagepack 1.3.1 Messagepack Messagepack 1.3.2 Messagepack Messagepack 1.3.3 Messagepack Messagepack 1.4.0 Messagepack Messagepack 1.4.1 Messagepack Messagepack 1.4.2 Messagepack Messagepack 1.4.3 Messagepack Messagepack 1.4.4 Messagepack Messagepack 1.5.0 Messagepack Messagepack 1.5.1 Messagepack Messagepack 1.6.0 Messagepack Messagepack 1.6.1 Messagepack Messagepack 1.6.1.2 Messagepack Messagepack 1.6.2 Messagepack Messagepack 1.7.0 Messagepack Messagepack 1.7.1 Messagepack Messagepack 1.7.2 Messagepack Messagepack 1.7.3 Messagepack Messagepack 1.7.3.1 Messagepack Messagepack 1.7.3.2 Messagepack Messagepack 1.7.3.3 Messagepack Messagepack 1.7.3.4 Messagepack Messagepack 1.7.3.7	44

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References