OSV-2020-1923

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libressl/OSV-2020-1923.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2020-1923
Published
2020-10-02T00:00:28Z
Modified
2022-04-13T03:04:38Z
Summary
Heap-buffer-overflow in do_print_ex
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13914

Crash type: Heap-buffer-overflow READ 1
Crash state:
do_print_ex
asn1_item_print_ctx
ASN1_item_print
References

Affected packages

OSS-Fuzz / libressl

Package

Name
libressl
Purl
pkg:generic/libressl

Affected ranges

Type
GIT
Repo
https://github.com/libressl-portable/portable.git
Events
Introduced
23fa9a51d8f50a563566455dd9428c3525c9216d
Fixed
17c88164016df821df2dff4b2b1291291ec4f28a

Affected versions

v2.*
v2.9.1
v2.9.2
v3.*
v3.0.0
v3.0.1
v3.0.2
v3.1.0
v3.1.1
v3.1.2
v3.1.3
v3.1.4
v3.1.5
v3.2.0
v3.2.1

Ecosystem specific 

{
    "fixed_range": "4b6c7bfd02dec26021882f1599dbcbccdd4d2889:17c88164016df821df2dff4b2b1291291ec4f28a",
    "introduced_range": "4ea2a01a0d2cc889e95316f51c7a36f8f158df44:4b6c7bfd02dec26021882f1599dbcbccdd4d2889",
    "severity": "MEDIUM"
}

Database specific

source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libressl/OSV-2020-1923.yaml"