OSV-2023-618

See a problem?

Import Source

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/apache-commons-io/OSV-2023-618.yaml

JSON Data

https://api.osv.dev/v1/vulns/OSV-2023-618

Published

2023-07-27T14:00:53.785484Z

Modified

2023-07-27T14:00:53.785737Z

Summary

Security exception in java.base/java.util.regex.Pattern$Loop.match

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60845

Crash type: Security exception
Crash state:
java.base/java.util.regex.Pattern$Loop.match
java.base/java.util.regex.Pattern$GroupTail.match
java.base/java.util.regex.Pattern$BranchConn.match

References

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60845

Affected packages

OSS-Fuzz / apache-commons-io

Package

Name: apache-commons-io
Purl: pkg:generic/apache-commons-io

Affected ranges

Type: GIT
Repo: https://github.com/apache/commons-io.git
Events: Introduced

72b1f88fb722def136ce87c9b2bfdd3c9126bb3d

Fixed

d3e5bd6de8bc96abbadccea8b934dc038a32e90c

Affected versions

commons-io-2.*

commons-io-2.14.0-RC1

rel/commons-io-2.*

rel/commons-io-2.14.0

Ecosystem specific

{
    "severity": "LOW"
}

Database specific

{
    "introduced_range": "c511d15294d1a406a177368804014313948e2601:06fde31494c279ad940149e1a3d4944040c73c0d",
    "fixed_range": "247c8e7d85a8df293011c7e9c94fd50bb2986fb7:d3e5bd6de8bc96abbadccea8b934dc038a32e90c"
}