OSV-2017-1

See a problem?

Import Source

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/curl/OSV-2017-1.yaml

JSON Data

https://api.osv.dev/v1/vulns/OSV-2017-1

Published

2021-01-13T00:00:01.695158Z

Modified

2022-04-13T03:04:42.923505Z

Summary

Index-out-of-bounds in fuzz_send_next_response

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3956

Crash type: Index-out-of-bounds
Crash state:
fuzz_send_next_response
fuzz_handle_transfer
_start

References

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3956

Affected packages

OSS-Fuzz / curl

Package

Name: curl
Purl: pkg:generic/curl

Affected ranges

Type: GIT
Repo: https://github.com/curl/curl.git
Events: Introduced

7ee59512f875604eb468fb6f3d26e39290f781c9

Fixed

544bfdebea2a9e8be1c01fc7954cd49638fe2803

Ecosystem specific

{
    "severity": "MEDIUM",
    "introduced_range": "1cb4f5d6e8e470638759a48ba99fda230089712f:e240a546a7ac2fa7956adb664b8c40c4dee4f82b",
    "fixed_range": "fa394c8c2e39ea327d668f14353b32580e821b1c:544bfdebea2a9e8be1c01fc7954cd49638fe2803"
}