OSV-2017-108

    Dashboard / Vulnerabilities / OSV-2017-108

    OSV-2017-108

    Published: 13 Jan 2021Last Modified: 13 Apr 2022

    Summary: Heap-use-after-free in nl::wpantund::SpinelNCPInstance::should_filter_address

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4459 ``` Crash type: Heap-use-after-free READ 6 Crash state: nl::wpantund::SpinelNCPInstance::should_filter_address nl::wpantund::SpinelNCPInstance::handle_ncp_spinel_value_inserted nl::wpantund::SpinelNCPInstance::handle_ncp_spinel_callback ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4459

    Affected packages

    Package

    Name: wpantund

    Purl: pkg:generic/wpantund

    Affected ranges

    Type: GIT

    Events:

    Introduced- ef31200d2b631f7aacc84c32e7c76c7428b4b515
    Fixed -e62ad0af2f10144886b061d7f1d5cfd2a15db9ae

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2017-108 | CVE-DB