OSV-2021-1309

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/sleuthkit/OSV-2021-1309.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2021-1309
Published
2021-09-18T00:00:18Z
Modified
2022-04-13T03:04:36Z
Summary
Heap-buffer-overflow in ext2fs_dinode_copy
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38872

Crash type: Heap-buffer-overflow READ {*}
Crash state:
ext2fs_dinode_copy
ext2fs_inode_walk
tsk_fs_meta_walk
References

Affected packages

OSS-Fuzz / sleuthkit

Package

Name
sleuthkit
Purl
pkg:generic/sleuthkit

Affected ranges

Type
GIT
Repo
https://github.com/sleuthkit/sleuthkit
Events
Introduced
126cbe2b7e7c9879ec1de7355369c06adbc27313
Fixed
675093ee08b1cc970419946760ca6340edfca272

Affected versions

sleuthkit-4.*
sleuthkit-4.10.1
sleuthkit-4.10.2
sleuthkit-4.11.0

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific

source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/sleuthkit/OSV-2021-1309.yaml"