OSV-2022-702

    Dashboard / Vulnerabilities / OSV-2022-702

    OSV-2022-702

    Published: 12 Aug 2022Last Modified: 20 Apr 2023

    Summary: Heap-double-free in ada_fuzz_header.h

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50042 ``` Crash type: Heap-double-free Crash state: ada_fuzz_header.h snmp_free_pdu snmp_api_fuzzer.c ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50042

    Affected packages

    Package

    Name: net-snmp

    Purl: pkg:generic/net-snmp

    Affected ranges

    Type: GIT

    Events:

    Introduced- 041396bce75d3780a0b5a808eb33310f49b00601
    Fixed -90aa2c37dc6a8bc280951ec6b6efe9714b0ef4de

    Affected versions

    v5.9.3
    v5.9.3.rc1
    v5.9.4.pre1
    v5.9.4.pre2

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2022-702 | CVE-DB