An issue exists in the protobuf crate prior to 2.6.0 for Rust. Attackers can exhaust all memory via Vec::reserve calls.
rust-protobuf project rust-protobuf
apache hbase 2.2.3