OSV-2021-745

    Dashboard / Vulnerabilities / OSV-2021-745

    OSV-2021-745

    Published: 11 May 2021Last Modified: 13 Apr 2022

    Summary: Heap-buffer-overflow in skip_to_next_entry

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34110 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: skip_to_next_entry get_exception_handler _PyEval_EvalFrameDefault ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34110

    Affected packages

    Package

    Name: cpython3

    Purl: pkg:generic/cpython3

    Affected ranges

    Type: GIT

    Events:

    Introduced- a0bd9e9c11f5f52c7ddd19144c8230da016b53c6
    Fixed -45862f9f5ef5d3c9da37f35e4fe4b18618530cfa

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2021-745 | CVE-DB