OSV-2024-714

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/lwan/OSV-2024-714.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2024-714
Published
2024-08-04T00:01:49Z
Modified
2026-09-12T14:46:20Z
Summary
Segv on unknown address in lwan_request_get_cookie
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69572

Crash type: Segv on unknown address
Crash state:
lwan_request_get_cookie
fuzz_parse_http_request
References

Affected packages

OSS-Fuzz / lwan

Package

Name
lwan
Purl
pkg:generic/lwan

Affected ranges

Type
GIT
Repo
https://github.com/lpereira/lwan.git
Events
Introduced
29a64cecc78d96b9bf164c4bc8fd4da17acf6378

Affected versions

v0.*
v0.6
v0.7

Ecosystem specific 

{
    "severity": null
}

Database specific

introduced_range 
"7c8900696e90e41cd45f944c988ff8dfbd481a74:2fbd55d5fc0fcefd2fa6ac748c9e5ce50ab9f424"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/lwan/OSV-2024-714.yaml"