OSV-2022-1174

Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/karchive/OSV-2022-1174.yaml
Published
2022-11-16T13:02:12.420492Z
Modified
2023-05-13T14:10:13.479678Z
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53423

Crash type: Heap-buffer-overflow READ 16
Crash state:
crc64_clmul
lzma_crc64
lzma_check_update
References

Affected packages

OSS-Fuzz / karchive

karchive

Affected ranges

Type
GIT
Events
Introduced
e6225a1fb55c4390835e2992caf5adff20d36e95

Affected versions

v5.*

v5.101.0
v5.101.0-rc1
v5.102.0
v5.102.0-rc1
v5.103.0
v5.103.0-rc1
v5.104.0
v5.104.0-rc1
v5.105.0
v5.105.0-rc1
v5.106.0
v5.106.0-rc1

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific 

{
    "introduced_range": "350c8b192f9227b9869ccf1523b5a37329f083bf:ffbc107db9453c3271d61a95c362c30979f190a8"
}