OSV-2020-649

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2020-649

Published

2020-07-01T00:00:22.458848Z

Modified

2022-04-13T03:04:42.628753Z

Summary

Heap-use-after-free in sctp_fill_hmac_digest_m

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18080

Crash type: Heap-use-after-free WRITE {*}
Crash state:
sctp_fill_hmac_digest_m
sctp_lowlevel_chunk_output
sctp_med_chunk_output

References

Affected packages

Type: GIT
Repo: https://github.com/weinrank/usrsctp
Events: Introduced

05bea46702687f26a81c41c3fb1fd1dd3d9c0aa1

Fixed

b7e98787c4698521b7adc771ee919a74e83f28ed

{
    "severity": "HIGH"
}