OSV-2020-392

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/gdal/OSV-2020-392.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2020-392
Published
2020-07-01T00:00:06.889412Z
Modified
2022-04-13T03:04:42.107611Z
Summary
Stack-buffer-overflow in nc4_get_att
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15143

Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
nc4_get_att
nc4_get_att_tc
nc_get_att_text
References

Affected packages

OSS-Fuzz / gdal

Package

Name
gdal
Purl
pkg:generic/gdal

Affected ranges

Type
GIT
Repo
https://github.com/OSGeo/gdal
Events
Introduced
38c1e385e81223476828d57aa83af5716a9256b7
Fixed
767e3a56144f676ca738ef8f700e0e56035bd05a
Introduced
27b9bf644bcf1208f7d6594bdd104cc8a8bb0646

Affected versions

v2.*

v2.4.2
v2.4.3
v2.4.3RC1
v2.4.4
v2.4.4RC1

v3.*

v3.0.1
v3.0.2
v3.0.2RC1
v3.0.3
v3.0.3RC1
v3.0.4
v3.0.4RC1

Ecosystem specific 

{
    "severity": "HIGH",
    "introduced_range": "289b796e365ac26020548410d6ae16022bc80718:f956a3c6ff43a877a63ee1199c5e0092c11a8c31"
}