OSV-2024-343

See a problem?

Import Source

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/pcapplusplus/OSV-2024-343.yaml

JSON Data

https://api.osv.dev/v1/vulns/OSV-2024-343

Published

2024-04-30T00:02:38.268026Z

Modified

2024-09-04T14:16:51.394837Z

Summary

Heap-buffer-overflow in pcpp::BgpUpdateMessageLayer::setPathAttributes

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67971

Crash type: Heap-buffer-overflow READ 2
Crash state:
pcpp::BgpUpdateMessageLayer::setPathAttributes
pcpp::BgpUpdateMessageLayer::clearPathAttributes
readParsedPacket

References

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67971

Affected packages

OSS-Fuzz / pcapplusplus

Package

Name: pcapplusplus
Purl: pkg:generic/pcapplusplus

Affected ranges

Type: GIT
Repo: https://github.com/seladb/PcapPlusPlus
Events: Introduced

5f1895a7b496fa78a2927bd5fe610ab619a3f49b

Affected versions

v24.*

v24.09

Ecosystem specific

{
    "severity": "MEDIUM"
}

Database specific

{
    "introduced_range": "762c7fd488d0bc6ce81d105fcb4f07ba2c9e6bc4:f112d0adcae6b75531894b3c1cb29f97bfdad171"
}