OSV-2020-1382

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/openvswitch/OSV-2020-1382.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2020-1382
Published
2020-07-28T00:00:06.837707Z
Modified
2023-02-24T01:43:04.741020Z
Summary
Use-of-uninitialized-value in nl_attr_is_valid
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19890

Crash type: Use-of-uninitialized-value
Crash state:
nl_attr_is_valid
format_odp_tun_attr
format_odp_key_attr__
References

Affected packages

OSS-Fuzz / openvswitch

Package

Name
openvswitch
Purl
pkg:generic/openvswitch

Affected ranges

Type
GIT
Repo
https://github.com/openvswitch/ovs.git
Events
Introduced
1ecb4cde6d889cf265667c798e8503103782869e
Fixed
bb9303899b8bd7a9251a723393959c923d0c0196
Fixed
d40db569e2a83d925c67b3affa1a31de6d9ef07c
Fixed
17f22fe46142ef0402bff0e3eb9a4768d93b8008
Fixed
abe7fe44862153e93cff8992ae27915931634a80

Affected versions

v2.*

v2.13.0
v2.13.1
v2.14.0

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific 

{
    "fixed_range": "193995f81c07347847190b03bd9da23948d497a6:17f22fe46142ef0402bff0e3eb9a4768d93b8008"
}