OSV-2023-705

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/lucene/OSV-2023-705.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2023-705
Published
2023-08-17T14:00:59.717535Z
Modified
2023-08-19T14:26:28.816770Z
Summary
Security exception in org.apache.lucene.util.automaton.RegExp.toAutomaton
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61493

Crash type: Security exception
Crash state:
org.apache.lucene.util.automaton.RegExp.toAutomaton
java.base/java.util.BitSet.ensureCapacity
java.base/java.util.BitSet.expandTo
References

Affected packages

OSS-Fuzz / lucene

Package

Name
lucene
Purl
pkg:generic/lucene

Affected ranges

Type
GIT
Repo
https://github.com/apache/lucene.git
Events
Introduced
18b56bd0024afeb1d9c04bd58af2711742dbdf67
Fixed
fb8183332bc5fa74a8eb36105be1026ae7aa0a8e
Introduced
14e0947cdb9bd9150584e9721b46353e29ba0ba0
Fixed
db02a1ee780a3d8ad775fdb0c8dd5efbd0d9b8ab

Ecosystem specific 

{
    "severity": "LOW"
}

Database specific 

{
    "fixed_range": "71f6f59a75392e1209d32362a9979ed47898c511:fb8183332bc5fa74a8eb36105be1026ae7aa0a8e"
}