OSV-2022-1044

    Dashboard / Vulnerabilities / OSV-2022-1044

    OSV-2022-1044

    Published: 13 Oct 2022Last Modified: 24 Feb 2023

    Summary: Heap-buffer-overflow in parse_via

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52326 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: parse_via get_hdr_field parse_headers ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52326

    Affected packages

    Package

    Name: opensips

    Purl: pkg:generic/opensips

    Affected ranges

    Type: GIT

    Events:

    Introduced- 4bc9d9603f6612f5b294eb6fa55ab38a474d1ce2
    Fixed -5e9f72d3d90e8fc9cb20578a95c891631b4d91da

    Affected versions

    3.1.10
    3.1.11
    3.1.12

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2022-1044 | CVE-DB