OSV-2021-1422

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/freeradius/OSV-2021-1422.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2021-1422
Published
2021-10-08T00:00:31Z
Modified
2022-04-13T03:04:40Z
Summary
Heap-buffer-overflow in fr_dns_label_uncompressed_length
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39657

Crash type: Heap-buffer-overflow READ 1
Crash state:
fr_dns_label_uncompressed_length
decode_value_trampoline
fr_struct_from_network
References

Affected packages

OSS-Fuzz / freeradius

Package

Name
freeradius
Purl
pkg:generic/freeradius

Affected ranges

Type
GIT
Repo
https://github.com/FreeRADIUS/freeradius-server.git
Events
Introduced
3882a233ede1ece51e5b6ebdc3c90b37ccc7223a
Fixed
1def06002d0722f02e396ee83e900ee4a011ad4d

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific

source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/freeradius/OSV-2021-1422.yaml"