OSV-2023-542

See a problem?

Import Source

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/jsign/OSV-2023-542.yaml

JSON Data

https://api.osv.dev/v1/vulns/OSV-2023-542

Published

2023-07-03T14:02:09.091932Z

Modified

2023-07-03T14:02:09.092172Z

Summary

Security exception in net.jsign.appx.Zip64EndOfCentralDirectoryRecord.read

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60308

Crash type: Security exception
Crash state:
net.jsign.appx.Zip64EndOfCentralDirectoryRecord.read
net.jsign.appx.CentralDirectory.read
net.jsign.appx.ZipFile.<init>

References

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60308

Affected packages

OSS-Fuzz / jsign

Package

Name: jsign
Purl: pkg:generic/jsign

Affected ranges

Type: GIT
Repo: https://github.com/ebourg/jsign.git
Events: Introduced

65fea7237f17973b08cd65144e85a34d114f2030

Fixed

76956c731089e01fadf236bf9ad4ce2f85c7f305

Ecosystem specific

{
    "severity": "LOW"
}

Database specific

fixed_range

"1cdad22785de7456575e99bac70bc1ea30768722:76956c731089e01fadf236bf9ad4ce2f85c7f305"

source

"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/jsign/OSV-2023-542.yaml"