OSV-2020-506

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2020-506

Published

2020-07-01T00:00:13.588403Z

Modified

2022-04-13T03:04:41.136226Z

Summary

Stack-buffer-overflow in parse_file_extra_owner

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14331

Crash type: Stack-buffer-overflow WRITE 1
Crash state:
parse_file_extra_owner
process_head_file_extra
process_head_file

References

Affected packages

Type: GIT
Repo: https://github.com/libarchive/libarchive.git
Events: Introduced

64e68f2034e6c5c6fd20d6b274b67fbdb88c3804

Fixed

2fce6f81cc59144bf4f2f66f7620233d609b41ef

{
    "severity": "HIGH"
}