OSV-2024-985

See a problem?

Import Source

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libssh2/OSV-2024-985.yaml

JSON Data

https://api.osv.dev/v1/vulns/OSV-2024-985

Published

2024-08-16T00:15:23.884058Z

Modified

2024-08-16T00:15:23.884369Z

Summary

Heap-double-free in libssh2_default_free

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69362

Crash type: Heap-double-free
Crash state:
libssh2_default_free
session_free
libssh2_session_free

References

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69362

Affected packages

OSS-Fuzz / libssh2

Package

Name: libssh2
Purl: pkg:generic/libssh2

Affected ranges

Type: GIT
Repo: https://github.com/libssh2/libssh2.git
Events: Introduced

d34d9258b8420b19ec3f97b4cc5bf7aa7d98e35a

Fixed

b3465418471ffa4cf0bbe1e8f28c4d007f060f99

Ecosystem specific

{
    "severity": "HIGH"
}

Database specific

{
    "introduced_range": "c0f69548be902147ce014ffa40b8db3cf1d4b0b4:b7050d9e0a6e33642ce83b53ecd408bdee4cc521",
    "fixed_range": "9d9ee7807dfc6e8d70431fb79ba75d65d8d7cf78:b3465418471ffa4cf0bbe1e8f28c4d007f060f99"
}