OSV-2022-5

    Dashboard / Vulnerabilities / OSV-2022-5

    OSV-2022-5

    Published: 5 Jan 2022Last Modified: 24 Jul 2022

    Summary: Heap-buffer-overflow in pcpp::IPv6AuthenticationHeader::getExtensionLen

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43290 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::IPv6AuthenticationHeader::getExtensionLen pcpp::IPv6Layer::parseExtensions pcpp::IPv6Layer::IPv6Layer ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43290

    Affected packages

    Package

    Name: pcapplusplus

    Purl: pkg:generic/pcapplusplus

    Affected ranges

    Type: GIT

    Events:

    Introduced- fbc52d37c6a7e8cc75e4950d2621cbd907c6cf8a
    Fixed -6cd7a5e096378ebd541b9c9d9d5b4ad9dbd75713

    Affected versions

    v21.05

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2022-5 | CVE-DB