OSV-2020-784

See a problem?

Import Source

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libzmq/OSV-2020-784.yaml

JSON Data

https://api.osv.dev/v1/vulns/OSV-2020-784

Published

2020-07-14T05:37:33.175193Z

Modified

2022-04-13T03:04:32.781119Z

Summary

Bad-cast to zmq::session_base_t from invalid vptr

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24018

Crash type: Bad-cast
Crash state:
Bad-cast to zmq::session_base_t from invalid vptr
zmq::stream_engine_base_t::in_event_internal
zmq::stream_engine_base_t::in_event

References

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24018

Affected packages

OSS-Fuzz / libzmq

Package

Name: libzmq
Purl: pkg:generic/libzmq

Affected ranges

Type: GIT
Repo: https://github.com/zeromq/libzmq.git
Events: Introduced

eb9118f0c9b9a70c0d2356838190350e9f88ed6f

Fixed

c733067d6d52acc8031792316c0ee58990cdd0e8

Fixed

d280c44fe00092d240f4da19b1247124069371c7

Ecosystem specific

{
    "severity": "HIGH"
}

Database specific

source

"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libzmq/OSV-2020-784.yaml"

fixed_range

"87ee10643854b1d27afd65fb1ec930dcedf35676:d280c44fe00092d240f4da19b1247124069371c7"