OSV-2023-155

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2023-155

Published

2023-03-07T13:02:03.518078Z

Modified

2023-03-16T14:24:07.289024Z

Summary

Heap-buffer-overflow in run_container_write

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56710

Crash type: Heap-buffer-overflow WRITE 16
Crash state:
run_container_write
ra_portable_serialize
roaring_bitmap_serialize

References

Affected packages

Type: GIT
Repo: https://github.com/RoaringBitmap/CRoaring
Events: Introduced

95de500c8dcbf2ba01c2677fe9097ce7db2f4f70

Fixed

2411b3be4ddf5cd982c8acadf56be109ba9d7b2c

Fixed

09de07567b9facb305ccdc739a1f4b0f21add8ba

{
    "severity": "HIGH"
}

{
    "fixed_range": "95de500c8dcbf2ba01c2677fe9097ce7db2f4f70:2411b3be4ddf5cd982c8acadf56be109ba9d7b2c"
}