OSV-2017-140

    Dashboard / Vulnerabilities / OSV-2017-140

    OSV-2017-140

    Published: 15 Jan 2021Last Modified: 13 Apr 2022

    Summary: Heap-buffer-overflow in mprint

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1523 ``` Crash type: Heap-buffer-overflow READ 3 Crash state: mprint match file_softmagic ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1523

    Affected packages

    Package

    Name: file

    Purl: pkg:generic/file

    Affected ranges

    Type: GIT

    Events:

    Introduced- a317154a5acbdcc82db79063742481ce83abafe7
    Fixed -6fc66d12c0ca172f4681adb63c6f662ac33cbc7c

    Affected versions

    FILE5_30

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2017-140 | CVE-DB