OSV-2020-2221

    Dashboard / Vulnerabilities / OSV-2020-2221

    OSV-2020-2221

    Published: 4 Dec 2020Last Modified: 13 Apr 2022

    Summary: UNKNOWN READ in std::__1::pair<unsigned int, void*> uWS::HttpParser::fenceAndConsumePostPadded<0

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28216 ``` Crash type: UNKNOWN READ Crash state: std::__1::pair<unsigned int, void*> uWS::HttpParser::fenceAndConsumePostPadded<0 uWS::HttpParser::consumePostPadded std::__1::__function::__func<LLVMFuzzerTestOneInput::$_0, std::__1::allocator<LL ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28216

    Affected packages

    Package

    Name: uwebsockets

    Purl: pkg:generic/uwebsockets

    Affected ranges

    Type: GIT

    Events:

    Introduced- ad0a9614307f0b3f4def859d560010b4b178f360
    Fixed -e30217e787fbd52cc74f6c61b08c2425f56df48e

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2020-2221 | CVE-DB