CVE-2020-5234CWE-121

Untrusted data can lead to DoS attack in MessagePack for C# and Unity

Medium · published January 31, 2020

CVSS v3.1
4.8
EPSS
2%
Percentile
75.3
In the wild
Unconfirmed
What it is

MessagePack for C# and Unity before version 1.9.11 and 2.1.90 has a vulnerability where untrusted data can lead to DoS attack due to hash collisions and stack overflow. Review the linked GitHub Security Advisory for more information and remediation steps.

The record
Technical detail
CVSS v3.1
4.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01578 · 75.3th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2020-01-31T17:50Z
EPSS history
Timeline
  • 31 JAN 17:50Z
    Untrusted data can lead to DoS attack in MessagePack for C# and Unity
    cvelistv5