OSV-2020-1272

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libressl/OSV-2020-1272.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2020-1272
Published
2020-07-22T21:50:02Z
Modified
2022-04-13T03:04:38Z
Summary
Heap-buffer-overflow in ASN1_get_object
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13803

Crash type: Heap-buffer-overflow READ 1
Crash state:
ASN1_get_object
asn1_check_tlen
asn1_item_ex_d2i
References

Affected packages

OSS-Fuzz / libressl

Package

Name
libressl
Purl
pkg:generic/libressl

Affected ranges

Type
GIT
Repo
https://github.com/libressl-portable/portable.git
Events
Introduced
4ea2a01a0d2cc889e95316f51c7a36f8f158df44
Fixed
2f7827344a0234320c7ad8d2fc2418e9d8a586c9

Ecosystem specific 

{
    "introduced_range": "unknown:4ea2a01a0d2cc889e95316f51c7a36f8f158df44",
    "severity": "MEDIUM"
}

Database specific

source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libressl/OSV-2020-1272.yaml"