OSV-2024-171

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/threetenbp/OSV-2024-171.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2024-171
Published
2024-03-15T00:08:01.855772Z
Modified
2026-08-19T14:24:57.313433Z
Summary
Security exception in org.threeten.bp.format.DateTimeFormatterBuilder$CompositePrinterParser.parse
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67357

Crash type: Security exception
Crash state:
org.threeten.bp.format.DateTimeFormatterBuilder$CompositePrinterParser.parse
java.base/sun.util.calendar.ZoneInfo.getLastRawOffset
java.base/sun.util.calendar.ZoneInfo.getOffsets
References

Affected packages

OSS-Fuzz / threetenbp

Package

Name
threetenbp
Purl
pkg:generic/threetenbp

Affected ranges

Type
GIT
Repo
https://github.com/ThreeTen/threetenbp
Events
Introduced
0a5403ed315b9b1770c27a74ca6c2e162851ca78

Affected versions

Other
tzdb2
v1.*
v1.6.9
v1.7.0
v1.7.1
v1.7.2
v1.7.3
v1.7.4

Ecosystem specific 

{
    "severity": "LOW"
}

Database specific

source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/threetenbp/OSV-2024-171.yaml"
introduced_range 
"1bc34b1340ae99978566999f70ae909013ee8c9d:bdf97bf72f4e5af7ae3c3af1ea8e3407c1451341"