OSV-2021-419

    Dashboard / Vulnerabilities / OSV-2021-419

    OSV-2021-419

    Published: 19 Feb 2021Last Modified: 13 Apr 2022

    Summary: Heap-buffer-overflow in input_osc_parse_colour

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31106 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: input_osc_parse_colour input_osc_11 input_exit_osc ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31106

    Affected packages

    Package

    Name: tmux

    Purl: pkg:generic/tmux

    Affected ranges

    Type: GIT

    Events:

    Introduced- ce5de765929ea38b68e3fd6c26e554ab0c1e09b1
    Fixed -11e404ca3c80893f59b1001f000c9390216c7e7a

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2021-419 | CVE-DB