OSV-2021-892

    Dashboard / Vulnerabilities / OSV-2021-892

    OSV-2021-892

    Published: 24 Jun 2021Last Modified: 13 Apr 2022

    Summary: Heap-buffer-overflow in explicit_bzero

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35485 ``` Crash type: Heap-buffer-overflow WRITE {*} Crash state: explicit_bzero crypto_free ssh_disconnect ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35485

    Affected packages

    Package

    Name: libssh

    Purl: pkg:generic/libssh

    Affected ranges

    Type: GIT

    Events:

    Introduced- ae184db913aef07d2cbfa9605f2af66f4d2365e5
    Fixed -f5211239f918acf405d104b200891ca58130e23e

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2021-892 | CVE-DB