OSV-2021-696

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2021-696

Published

2021-04-28T00:00:54.883431Z

Modified

2022-04-13T03:04:42.867684Z

Summary

UNKNOWN READ in ntlm_decode_type2_target

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33720

Crash type: UNKNOWN READ
Crash state:
ntlm_decode_type2_target
Curl_auth_decode_ntlm_type2_message
Curl_sasl_continue

References

Affected packages

Type: GIT
Repo: https://github.com/curl/curl.git
Events: Introduced

19ea52da4df3c3ebc399ae25e705c7a8b5d45d95

Fixed

3e820fbf25f38743fd30e0ce96ba9ae34791aa7c

{
    "severity": "MEDIUM"
}