OSV-2021-401

    Dashboard / Vulnerabilities / OSV-2021-401

    OSV-2021-401

    Published: 16 Feb 2021Last Modified: 13 Apr 2022

    Summary: Segv on unknown address in us_internal_dispatch_ready_poll

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30951 ``` Crash type: Segv on unknown address Crash state: us_internal_dispatch_ready_poll us_loop_run test ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30951

    Affected packages

    Package

    Name: uwebsockets

    Purl: pkg:generic/uwebsockets

    Affected ranges

    Type: GIT

    Events:

    Introduced- 6f1c0d802221b5eaae49acef8c2cfa48433583fb
    Fixed -1ef15da77b591594b19a5a81f5c80fb3b34d089f

    Affected versions

    v19.0.0a4

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2021-401 | CVE-DB