OSV-2021-147

    Dashboard / Vulnerabilities / OSV-2021-147

    OSV-2021-147

    Published: 13 Jan 2021Last Modified: 13 Apr 2022

    Summary: Use-of-uninitialized-value in gnutls_ocsp_resp_get_status

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1492 ``` Crash type: Use-of-uninitialized-value Crash state: gnutls_ocsp_resp_get_status gnutls_ocsp_resp_import _start ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1492

    Affected packages

    Package

    Name: gnutls

    Purl: pkg:generic/gnutls

    Affected ranges

    Type: GIT

    Events:

    Introduced- d246f61b04836c6040fff7936de551ef92529971
    Fixed -73988c65e9e8d6563fe4c7e45602c0248ca56c6c

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2021-147 | CVE-DB