# CVE-2021-22570: protobuf: The protobuf packages provide Protocol Buffers, Google's data interchange format

CVE-2021-22570 is fixed in 27 products on 1 platform, first by DEBIAN-CVE-2021-22570, released January 26, 2022. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2021-22570
- Priority: High
- CVSS: 7.5 (Moderate)
- EPSS: 0.0266
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Jan 26, 2022

## Description

The protobuf packages provide Protocol Buffers, Google's data interchange format. Protocol Buffers can encode structured data in an efficient yet extensible format, and provide a flexible, efficient, and automated mechanism for serializing structured data.  Security Fix(es):  * protobuf: Incorrect parsing of nullchar in the proto symbol leads to Nullptr dereference (CVE-2021-22570)  For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  Additional Changes:  For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.7 Release Notes linked from the References section.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | elpa-protobuf-mode Ubuntu 22.04.1 LTS (jammy) | 3.12.4-1ubuntu7.22.04.1 | [elpa-protobuf-mode 3.12.4-1ubuntu7.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-elpa-protobuf-mode-3.12.4-1ubuntu7.22.04.1.md) | Sep 22, 2022 |
| Linux | libprotobuf-java Ubuntu 18.04.6 LTS (bionic) | 3.0.0-9.1ubuntu1.1 | [libprotobuf-java 3.0.0-9.1ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libprotobuf-java-3.0.0-9.1ubuntu1.1.md) | Sep 22, 2022 |
| Linux | libprotobuf-java Ubuntu 20.04 LTS (focal) | 3.6.1.3-2ubuntu5.2 | [libprotobuf-java 3.6.1.3-2ubuntu5.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libprotobuf-java-3.6.1.3-2ubuntu5.2.md) | Sep 22, 2022 |
| Linux | libprotobuf-java Ubuntu 22.04.1 LTS (jammy) | 3.12.4-1ubuntu7.22.04.1 | [libprotobuf-java 3.12.4-1ubuntu7.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libprotobuf-java-3.12.4-1ubuntu7.22.04.1.md) | Sep 22, 2022 |
| Linux | libprotobuf-lite10 Ubuntu 18.04.6 LTS (bionic) | 3.0.0-9.1ubuntu1.1 | [libprotobuf-lite10 3.0.0-9.1ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libprotobuf-lite10-3.0.0-9.1ubuntu1.1.md) | Sep 22, 2022 |
| Linux | libprotobuf-lite17 Ubuntu 20.04 LTS (focal) | 3.6.1.3-2ubuntu5.2 | [libprotobuf-lite17 3.6.1.3-2ubuntu5.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libprotobuf-lite17-3.6.1.3-2ubuntu5.2.md) | Sep 22, 2022 |
| Linux | libprotobuf-lite23 Ubuntu 22.04.1 LTS (jammy) | 3.12.4-1ubuntu7.22.04.1 | [libprotobuf-lite23 3.12.4-1ubuntu7.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libprotobuf-lite23-3.12.4-1ubuntu7.22.04.1.md) | Sep 22, 2022 |
| Linux | libprotobuf10 Ubuntu 18.04.6 LTS (bionic) | 3.0.0-9.1ubuntu1.1 | [libprotobuf10 3.0.0-9.1ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libprotobuf10-3.0.0-9.1ubuntu1.1.md) | Sep 22, 2022 |
| Linux | libprotobuf17 Ubuntu 20.04 LTS (focal) | 3.6.1.3-2ubuntu5.2 | [libprotobuf17 3.6.1.3-2ubuntu5.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libprotobuf17-3.6.1.3-2ubuntu5.2.md) | Sep 22, 2022 |
| Linux | libprotobuf23 Ubuntu 22.04.1 LTS (jammy) | 3.12.4-1ubuntu7.22.04.1 | [libprotobuf23 3.12.4-1ubuntu7.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libprotobuf23-3.12.4-1ubuntu7.22.04.1.md) | Sep 22, 2022 |
| Linux | libprotoc10 Ubuntu 18.04.6 LTS (bionic) | 3.0.0-9.1ubuntu1.1 | [libprotoc10 3.0.0-9.1ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libprotoc10-3.0.0-9.1ubuntu1.1.md) | Sep 22, 2022 |
| Linux | libprotoc17 Ubuntu 20.04 LTS (focal) | 3.6.1.3-2ubuntu5.2 | [libprotoc17 3.6.1.3-2ubuntu5.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libprotoc17-3.6.1.3-2ubuntu5.2.md) | Sep 22, 2022 |
| Linux | libprotoc23 Ubuntu 22.04.1 LTS (jammy) | 3.12.4-1ubuntu7.22.04.1 | [libprotoc23 3.12.4-1ubuntu7.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libprotoc23-3.12.4-1ubuntu7.22.04.1.md) | Sep 22, 2022 |
| Linux | protobuf Debian 12.15 (bookworm) | 3.21.9-3 | [DEBIAN-CVE-2021-22570](https://patchblox.com/security/data/fix/linux/debian-cve-2021-22570.md) | Jan 26, 2022 |
| Linux | protobuf Debian 13.5 (trixie) | 3.21.9-3 | [DEBIAN-CVE-2021-22570](https://patchblox.com/security/data/fix/linux/debian-cve-2021-22570.md) | Jan 26, 2022 |
| Linux | protobuf Debian 14 | 3.21.9-3 | [DEBIAN-CVE-2021-22570](https://patchblox.com/security/data/fix/linux/debian-cve-2021-22570.md) | Jan 26, 2022 |
| Linux | protobuf RHEL 8 | 0:3.5.0-15.el8 | [RHSA-2022:7464](https://patchblox.com/security/data/fix/linux/rhsa-2022-7464.md) | Nov 8, 2022 |
| Linux | protobuf RHEL 9 | 0:3.14.0-13.el9 | [RHSA-2022:7970](https://patchblox.com/security/data/fix/linux/rhsa-2022-7970.md) | Nov 15, 2022 |
| Linux | protobuf almalinux 8 | 3.5.0-15.el8 | [ALSA-2022:7464](https://patchblox.com/security/data/fix/linux/alsa-2022-7464.md) | Nov 8, 2022 |
| Linux | protobuf almalinux 9 | 3.14.0-13.el9 | [ALSA-2022:7970](https://patchblox.com/security/data/fix/linux/alsa-2022-7970.md) | Nov 15, 2022 |
| Linux | protobuf amzn 2023 | 3.14.0-7.amzn2023.0.3 | [ALAS2023-2023-009](https://patchblox.com/security/data/fix/linux/alas2023-2023-009.md) | Feb 17, 2023 |
| Linux | protobuf ol 8 | 0:3.5.0-15.el8 | [ELSA-2022-7464](https://patchblox.com/security/data/fix/linux/elsa-2022-7464.md) | Nov 15, 2022 |
| Linux | protobuf ol 9 | 0:3.14.0-13.el9 | [ELSA-2022-7970](https://patchblox.com/security/data/fix/linux/elsa-2022-7970.md) | Nov 22, 2022 |
| Linux | protobuf rocky 8 | 0:3.5.0-15.el8 | [RLSA-2022:7464](https://patchblox.com/security/data/fix/linux/rlsa-2022-7464.md) | Nov 8, 2022 |
| Linux | protobuf rocky 9 | 0:3.14.0-13.el9 | [RLSA-2022:7970](https://patchblox.com/security/data/fix/linux/rlsa-2022-7970.md) | Nov 15, 2022 |
| Linux | protobuf-compiler RHEL 8 | 0:3.5.0-15.el8 | [RHSA-2022:7464](https://patchblox.com/security/data/fix/linux/rhsa-2022-7464.md) | Nov 8, 2022 |
| Linux | protobuf-compiler RHEL 9 | 0:3.14.0-13.el9 | [RHSA-2022:7970](https://patchblox.com/security/data/fix/linux/rhsa-2022-7970.md) | Nov 15, 2022 |
| Linux | protobuf-compiler Ubuntu 18.04.6 LTS (bionic) | 3.0.0-9.1ubuntu1.1 | [protobuf-compiler 3.0.0-9.1ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-protobuf-compiler-3.0.0-9.1ubuntu1.1.md) | Sep 22, 2022 |
| Linux | protobuf-compiler Ubuntu 20.04 LTS (focal) | 3.6.1.3-2ubuntu5.2 | [protobuf-compiler 3.6.1.3-2ubuntu5.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-protobuf-compiler-3.6.1.3-2ubuntu5.2.md) | Sep 22, 2022 |
| Linux | protobuf-compiler Ubuntu 22.04.1 LTS (jammy) | 3.12.4-1ubuntu7.22.04.1 | [protobuf-compiler 3.12.4-1ubuntu7.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-protobuf-compiler-3.12.4-1ubuntu7.22.04.1.md) | Sep 22, 2022 |
| Linux | protobuf-compiler almalinux 8 | 3.5.0-15.el8 | [ALSA-2022:7464](https://patchblox.com/security/data/fix/linux/alsa-2022-7464.md) | Nov 8, 2022 |
| Linux | protobuf-compiler almalinux 9 | 3.14.0-13.el9 | [ALSA-2022:7970](https://patchblox.com/security/data/fix/linux/alsa-2022-7970.md) | Nov 15, 2022 |
| Linux | protobuf-compiler amzn 2023 | 3.14.0-7.amzn2023.0.3 | [ALAS2023-2023-009](https://patchblox.com/security/data/fix/linux/alas2023-2023-009.md) | Feb 17, 2023 |
| Linux | protobuf-compiler ol 8 | 0:3.5.0-15.el8 | [ELSA-2022-7464](https://patchblox.com/security/data/fix/linux/elsa-2022-7464.md) | Nov 15, 2022 |
| Linux | protobuf-compiler ol 9 | 0:3.14.0-13.el9 | [ELSA-2022-7970](https://patchblox.com/security/data/fix/linux/elsa-2022-7970.md) | Nov 22, 2022 |
| Linux | protobuf-compiler-debuginfo amzn 2023 | 3.14.0-7.amzn2023.0.3 | [ALAS2023-2023-009](https://patchblox.com/security/data/fix/linux/alas2023-2023-009.md) | Feb 17, 2023 |
| Linux | protobuf-debuginfo amzn 2023 | 3.14.0-7.amzn2023.0.3 | [ALAS2023-2023-009](https://patchblox.com/security/data/fix/linux/alas2023-2023-009.md) | Feb 17, 2023 |
| Linux | protobuf-debugsource amzn 2023 | 3.14.0-7.amzn2023.0.3 | [ALAS2023-2023-009](https://patchblox.com/security/data/fix/linux/alas2023-2023-009.md) | Feb 17, 2023 |
| Linux | protobuf-devel RHEL 8 | 0:3.5.0-15.el8 | [RHSA-2022:7464](https://patchblox.com/security/data/fix/linux/rhsa-2022-7464.md) | Nov 8, 2022 |
| Linux | protobuf-devel RHEL 9 | 0:3.14.0-13.el9 | [RHSA-2022:7970](https://patchblox.com/security/data/fix/linux/rhsa-2022-7970.md) | Nov 15, 2022 |
| Linux | protobuf-devel almalinux 8 | 3.5.0-15.el8 | [ALSA-2022:7464](https://patchblox.com/security/data/fix/linux/alsa-2022-7464.md) | Nov 8, 2022 |
| Linux | protobuf-devel almalinux 9 | 3.14.0-13.el9 | [ALSA-2022:7970](https://patchblox.com/security/data/fix/linux/alsa-2022-7970.md) | Nov 15, 2022 |
| Linux | protobuf-devel amzn 2023 | 3.14.0-7.amzn2023.0.3 | [ALAS2023-2023-009](https://patchblox.com/security/data/fix/linux/alas2023-2023-009.md) | Feb 17, 2023 |
| Linux | protobuf-devel ol 8 | 0:3.5.0-15.el8 | [ELSA-2022-7464](https://patchblox.com/security/data/fix/linux/elsa-2022-7464.md) | Nov 15, 2022 |
| Linux | protobuf-devel ol 9 | 0:3.14.0-13.el9 | [ELSA-2022-7970](https://patchblox.com/security/data/fix/linux/elsa-2022-7970.md) | Nov 22, 2022 |
| Linux | protobuf-emacs amzn 2023 | 3.14.0-7.amzn2023.0.3 | [ALAS2023-2023-009](https://patchblox.com/security/data/fix/linux/alas2023-2023-009.md) | Feb 17, 2023 |
| Linux | protobuf-lite RHEL 8 | 0:3.5.0-15.el8 | [RHSA-2022:7464](https://patchblox.com/security/data/fix/linux/rhsa-2022-7464.md) | Nov 8, 2022 |
| Linux | protobuf-lite RHEL 9 | 0:3.14.0-13.el9 | [RHSA-2022:7970](https://patchblox.com/security/data/fix/linux/rhsa-2022-7970.md) | Nov 15, 2022 |
| Linux | protobuf-lite almalinux 8 | 3.5.0-15.el8 | [ALSA-2022:7464](https://patchblox.com/security/data/fix/linux/alsa-2022-7464.md) | Nov 8, 2022 |
| Linux | protobuf-lite almalinux 9 | 3.14.0-13.el9 | [ALSA-2022:7970](https://patchblox.com/security/data/fix/linux/alsa-2022-7970.md) | Nov 15, 2022 |
| Linux | protobuf-lite amzn 2023 | 3.14.0-7.amzn2023.0.3 | [ALAS2023-2023-009](https://patchblox.com/security/data/fix/linux/alas2023-2023-009.md) | Feb 17, 2023 |
| Linux | protobuf-lite ol 8 | 0:3.5.0-15.el8 | [ELSA-2022-7464](https://patchblox.com/security/data/fix/linux/elsa-2022-7464.md) | Nov 15, 2022 |
| Linux | protobuf-lite ol 9 | 0:3.14.0-13.el9 | [ELSA-2022-7970](https://patchblox.com/security/data/fix/linux/elsa-2022-7970.md) | Nov 22, 2022 |
| Linux | protobuf-lite-debuginfo amzn 2023 | 3.14.0-7.amzn2023.0.3 | [ALAS2023-2023-009](https://patchblox.com/security/data/fix/linux/alas2023-2023-009.md) | Feb 17, 2023 |
| Linux | protobuf-lite-devel RHEL 8 | 0:3.5.0-15.el8 | [RHSA-2022:7464](https://patchblox.com/security/data/fix/linux/rhsa-2022-7464.md) | Nov 8, 2022 |
| Linux | protobuf-lite-devel RHEL 9 | 0:3.14.0-13.el9 | [RHSA-2022:7970](https://patchblox.com/security/data/fix/linux/rhsa-2022-7970.md) | Nov 15, 2022 |
| Linux | protobuf-lite-devel almalinux 8 | 3.5.0-15.el8 | [ALSA-2022:7464](https://patchblox.com/security/data/fix/linux/alsa-2022-7464.md) | Nov 8, 2022 |
| Linux | protobuf-lite-devel almalinux 9 | 3.14.0-13.el9 | [ALSA-2022:7970](https://patchblox.com/security/data/fix/linux/alsa-2022-7970.md) | Nov 15, 2022 |
| Linux | protobuf-lite-devel amzn 2023 | 3.14.0-7.amzn2023.0.3 | [ALAS2023-2023-009](https://patchblox.com/security/data/fix/linux/alas2023-2023-009.md) | Feb 17, 2023 |
| Linux | protobuf-lite-devel ol 8 | 0:3.5.0-15.el8 | [ELSA-2022-7464](https://patchblox.com/security/data/fix/linux/elsa-2022-7464.md) | Nov 15, 2022 |
| Linux | protobuf-lite-devel ol 9 | 0:3.14.0-13.el9 | [ELSA-2022-7970](https://patchblox.com/security/data/fix/linux/elsa-2022-7970.md) | Nov 22, 2022 |
| Linux | protobuf-lite-static amzn 2023 | 3.14.0-7.amzn2023.0.3 | [ALAS2023-2023-009](https://patchblox.com/security/data/fix/linux/alas2023-2023-009.md) | Feb 17, 2023 |
| Linux | protobuf-static amzn 2023 | 3.14.0-7.amzn2023.0.3 | [ALAS2023-2023-009](https://patchblox.com/security/data/fix/linux/alas2023-2023-009.md) | Feb 17, 2023 |
| Linux | protobuf-vim amzn 2023 | 3.14.0-7.amzn2023.0.3 | [ALAS2023-2023-009](https://patchblox.com/security/data/fix/linux/alas2023-2023-009.md) | Feb 17, 2023 |
| Linux | python-protobuf Ubuntu 18.04.6 LTS (bionic) | 3.0.0-9.1ubuntu1.1 | [python-protobuf 3.0.0-9.1ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python-protobuf-3.0.0-9.1ubuntu1.1.md) | Sep 22, 2022 |
| Linux | python-protobuf Ubuntu 20.04 LTS (focal) | 3.6.1.3-2ubuntu5.2 | [python-protobuf 3.6.1.3-2ubuntu5.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-python-protobuf-3.6.1.3-2ubuntu5.2.md) | Sep 22, 2022 |
| Linux | python3-protobuf RHEL 8 | 0:3.5.0-15.el8 | [RHSA-2022:7464](https://patchblox.com/security/data/fix/linux/rhsa-2022-7464.md) | Nov 8, 2022 |
| Linux | python3-protobuf RHEL 9 | 0:3.14.0-13.el9 | [RHSA-2022:7970](https://patchblox.com/security/data/fix/linux/rhsa-2022-7970.md) | Nov 15, 2022 |
| Linux | python3-protobuf Ubuntu 18.04.6 LTS (bionic) | 3.0.0-9.1ubuntu1.1 | [python3-protobuf 3.0.0-9.1ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python3-protobuf-3.0.0-9.1ubuntu1.1.md) | Sep 22, 2022 |
| Linux | python3-protobuf Ubuntu 20.04 LTS (focal) | 3.6.1.3-2ubuntu5.2 | [python3-protobuf 3.6.1.3-2ubuntu5.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-python3-protobuf-3.6.1.3-2ubuntu5.2.md) | Sep 22, 2022 |
| Linux | python3-protobuf Ubuntu 22.04.1 LTS (jammy) | 3.12.4-1ubuntu7.22.04.1 | [python3-protobuf 3.12.4-1ubuntu7.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-python3-protobuf-3.12.4-1ubuntu7.22.04.1.md) | Sep 22, 2022 |
| Linux | python3-protobuf almalinux 8 | 3.5.0-15.el8 | [ALSA-2022:7464](https://patchblox.com/security/data/fix/linux/alsa-2022-7464.md) | Nov 8, 2022 |
| Linux | python3-protobuf almalinux 9 | 3.14.0-13.el9 | [ALSA-2022:7970](https://patchblox.com/security/data/fix/linux/alsa-2022-7970.md) | Nov 15, 2022 |
| Linux | python3-protobuf amzn 2023 | 3.14.0-7.amzn2023.0.3 | [ALAS2023-2023-009](https://patchblox.com/security/data/fix/linux/alas2023-2023-009.md) | Feb 17, 2023 |
| Linux | python3-protobuf ol 8 | 0:3.5.0-15.el8 | [ELSA-2022-7464](https://patchblox.com/security/data/fix/linux/elsa-2022-7464.md) | Nov 15, 2022 |
| Linux | python3-protobuf ol 9 | 0:3.14.0-13.el9 | [ELSA-2022-7970](https://patchblox.com/security/data/fix/linux/elsa-2022-7970.md) | Nov 22, 2022 |
| Linux | ruby-google-protobuf Ubuntu 20.04 LTS (focal) | 3.6.1.3-2ubuntu5.2 | [ruby-google-protobuf 3.6.1.3-2ubuntu5.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-ruby-google-protobuf-3.6.1.3-2ubuntu5.2.md) | Sep 22, 2022 |
| Linux | ruby-google-protobuf Ubuntu 22.04.1 LTS (jammy) | 3.12.4-1ubuntu7.22.04.1 | [ruby-google-protobuf 3.12.4-1ubuntu7.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-ruby-google-protobuf-3.12.4-1ubuntu7.22.04.1.md) | Sep 22, 2022 |

---

Data as of 2026-11-09T01:18:40Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.