OSV-2018-389

    Dashboard / Vulnerabilities / OSV-2018-389

    OSV-2018-389

    Published: 15 Jan 2021Last Modified: 13 Apr 2022

    Summary: UNKNOWN READ in boost::re_detail_NUMBER::basic_regex_creator<char, boost::regex_traits<char, boo

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6708 ``` Crash type: UNKNOWN READ Crash state: boost::re_detail_NUMBER::basic_regex_creator<char, boost::regex_traits<char, boo boost::re_detail_NUMBER::basic_regex_creator<char, boost::regex_traits<char, boo boost::re_detail_NUMBER::basic_regex_parser<char, boost::regex_traits<char, boos ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6708

    Affected packages

    Package

    Name: boost

    Purl: pkg:generic/boost

    Affected ranges

    Type: GIT

    Events:

    Introduced- c47cf1cf5ae18d4bd98f6376ab2949785a5d0cc2
    Fixed -1b085e6b351350816a6ad6e2f1a88e519b093382

    Affected versions

    boost-1.66.0
    boost-1.66.0-beta1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2018-389 | CVE-DB