OSV-2017-108

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/wpantund/OSV-2017-108.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2017-108
Published
2021-01-13T21:57:48.276073Z
Modified
2022-04-13T03:04:33.934541Z
Summary
Heap-use-after-free in nl::wpantund::SpinelNCPInstance::should_filter_address
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4459

Crash type: Heap-use-after-free READ 6
Crash state:
nl::wpantund::SpinelNCPInstance::should_filter_address
nl::wpantund::SpinelNCPInstance::handle_ncp_spinel_value_inserted
nl::wpantund::SpinelNCPInstance::handle_ncp_spinel_callback
References

Affected packages

OSS-Fuzz / wpantund

Package

Name
wpantund
Purl
pkg:generic/wpantund

Affected ranges

Type
GIT
Repo
https://github.com/openthread/wpantund
Events
Introduced
ef31200d2b631f7aacc84c32e7c76c7428b4b515
Fixed
e62ad0af2f10144886b061d7f1d5cfd2a15db9ae

Ecosystem specific 

{
    "severity": "HIGH",
    "fixed_range": "6ebf81507780f03ee1c038dfe3fc0f78d0f09119:e62ad0af2f10144886b061d7f1d5cfd2a15db9ae"
}