OSV-2021-1727

    Dashboard / Vulnerabilities / OSV-2021-1727

    OSV-2021-1727

    Published: 21 Dec 2021Last Modified: 13 Apr 2022

    Summary: UNKNOWN WRITE in void uWS::WebSocketProtocol<true, Impl>::UnrolledXor<4>

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42672 ``` Crash type: UNKNOWN WRITE Crash state: void uWS::WebSocketProtocol<true, Impl>::UnrolledXor<4> void uWS::WebSocketProtocol<true, Impl>::UnrolledXor<10> void uWS::WebSocketProtocol<true, Impl>::UnrolledXor<14> ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42672

    Affected packages

    Package

    Name: uwebsockets

    Purl: pkg:generic/uwebsockets

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0c8be4d20ccce75be632dd8aae109b68485ccb40
    Fixed -5df695e02aa4f7b5be1959082239eb72db275be5

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2021-1727 | CVE-DB