OSV-2020-910

See a problem?

Import Source

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libzmq/OSV-2020-910.yaml

JSON Data

https://api.osv.dev/v1/vulns/OSV-2020-910

Published

2020-07-21T00:00:27.471141Z

Modified

2022-04-13T03:04:32.775087Z

Summary

Use-of-uninitialized-value in zmq::stream_engine_base_t::out_event

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24200

Crash type: Use-of-uninitialized-value
Crash state:
zmq::stream_engine_base_t::out_event
zmq::epoll_t::loop
zmq::worker_poller_base_t::worker_routine

References

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24200

Affected packages

OSS-Fuzz / libzmq

Package

Name: libzmq
Purl: pkg:generic/libzmq

Affected ranges

Type: GIT
Repo: https://github.com/zeromq/libzmq.git
Events: Introduced

eb9118f0c9b9a70c0d2356838190350e9f88ed6f

Fixed

d280c44fe00092d240f4da19b1247124069371c7

Ecosystem specific

{
    "severity": "MEDIUM",
    "introduced_range": "2352e0a8968b102cd03f1d4089b46fe454cda05e:fc99911d907bfb33081909a565ca6bbb5437b00c",
    "fixed_range": "87ee10643854b1d27afd65fb1ec930dcedf35676:d280c44fe00092d240f4da19b1247124069371c7"
}