OSV-2020-19

See a problem?

Import Source

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/suricata/OSV-2020-19.yaml

JSON Data

https://api.osv.dev/v1/vulns/OSV-2020-19

Published

2020-06-24T01:51:10.440277Z

Modified

2022-04-13T03:04:32.731752Z

Summary

Heap-use-after-free in htp_connp_is_line_terminator

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21712

Crash type: Heap-use-after-free READ 1
Crash state:
htp_connp_is_line_terminator
htp_connp_REQ_HEADERS
htp_connp_req_data

References

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21712

Affected packages

OSS-Fuzz / suricata

Package

Name: suricata
Purl: pkg:generic/suricata

Affected ranges

Type: GIT
Repo: https://github.com/OISF/suricata.git
Events: Introduced

c76f98073e388cef74b1659bcdb217b55b3a782a

Fixed

967340e9011ba991bd56530f14b6a1cc6a265069

Ecosystem specific

{
    "severity": "HIGH",
    "introduced_range": "5e1381638029f98c5c2f2babf6370e21c2786252:dfdf2eb050781a6d337581543a08a65a7f7ab678",
    "fixed_range": "dfdf2eb050781a6d337581543a08a65a7f7ab678:967340e9011ba991bd56530f14b6a1cc6a265069"
}