OSV-2020-1007

See a problem?

Import Source

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/suricata/OSV-2020-1007.yaml

JSON Data

https://api.osv.dev/v1/vulns/OSV-2020-1007

Published

2020-07-22T21:49:39.655879Z

Modified

2022-04-13T03:04:32.743041Z

Summary

Heap-use-after-free in DetectParseDupSigCompareFunc

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22715

Crash type: Heap-use-after-free READ 4
Crash state:
DetectParseDupSigCompareFunc
HashListTableLookup
DetectEngineSignatureIsDuplicate

References

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22715

Affected packages

OSS-Fuzz / suricata

Package

Name: suricata
Purl: pkg:generic/suricata

Affected ranges

Type: GIT
Repo: https://github.com/OISF/suricata.git
Events: Introduced

19fe8d9894207f18dbd305a5834820f3a698dc32

Fixed

8c5c949cfa05e00a896fe6f61513f1d234cb7d24

Ecosystem specific

{
    "severity": "HIGH",
    "introduced_range": "unknown:19fe8d9894207f18dbd305a5834820f3a698dc32",
    "fixed_range": "c09235e327eed02eb22d990c017c40316cd246f8:8c5c949cfa05e00a896fe6f61513f1d234cb7d24"
}