OSV-2022-281

    Dashboard / Vulnerabilities / OSV-2022-281

    OSV-2022-281

    Published: 26 Mar 2022Last Modified: 24 Feb 2023

    Summary: Heap-use-after-free in jsmn_parse

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45984 Crash type: Heap-use-after-free WRITE 4 Crash state: jsmn_parse flb_json_tokenise flb_pack_json_state

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45984

    Affected packages

    Package

    Name: fluent-bit

    Purl: pkg:generic/fluent-bit

    Affected ranges

    Type: GIT

    Events:

    Introduced- af7ef37d6f0c61a79a8bd66f603273245198e069
    Fixed -7568fddddca799fc921e9db29c3f57d67d0fd85c

    Affected versions

    unstable-master

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2022-281 | CVE-DB