OSV-2020-2238

    Dashboard / Vulnerabilities / OSV-2020-2238

    OSV-2020-2238

    Published: 5 Dec 2020Last Modified: 13 Apr 2022

    Summary: Heap-buffer-overflow in dotnet_parse_tilde_2

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28253 ``` Crash type: Heap-buffer-overflow READ {*} Crash state: dotnet_parse_tilde_2 dotnet_parse_tilde dotnet_parse_com ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28253

    Affected packages

    Package

    Name: yara

    Purl: pkg:generic/yara

    Affected ranges

    Type: GIT

    Events:

    Introduced- aa182b4f928e54189fe51606d4dc419e7b27022f
    Fixed -09116e8b7977b718f363f76214ea6cc158420da9

    Affected versions

    v.3.9.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2020-2238 | CVE-DB