OSV-2021-1509

Import Source

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/clamav/OSV-2021-1509.yaml

JSON Data

https://api.osv.dev/v1/vulns/OSV-2021-1509

Published

2021-10-30T00:01:19.289143Z

Modified

2022-04-13T03:29:14.526232Z

Summary

Heap-buffer-overflow in handle_gets

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40455

Crash type: Heap-buffer-overflow READ {*}
Crash state:
handle_gets
cli_mbox
cli_scanmail

References

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40455

Affected packages

OSS-Fuzz / clamav

Package

Name: clamav
Purl: pkg:generic/clamav

Affected ranges

Type: GIT
Repo: https://github.com/Cisco-Talos/clamav-devel.git
Events: Introduced

0354482e165032c9264d4fbb888ed642b419c662

Fixed

d1141becac82099de46f94f5d7a02d60cb1baf1d

Introduced

f3f5e0c1f4c25f53fe353a23a25af392232851d2

Fixed

7e49c758ac412651afd71cbb37aa61a2b513ce2e

Introduced

960e212dd568c0fc8975676583c7abb3c6b5b213

Fixed

dbd02f15322de849ba8d55494c8a0d1b86a7d7aa

Ecosystem specific

{
    "severity": "HIGH"
}