OSV-2022-738

    Dashboard / Vulnerabilities / OSV-2022-738

    OSV-2022-738

    Published: 19 Aug 2022Last Modified: 10 Jan 2025

    Summary: Security exception in DatatypeFuzzer.fuzzerTestOneInput

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50379 ``` Crash type: Security exception Crash state: DatatypeFuzzer.fuzzerTestOneInput com.code_intelligence.jazzer.driver.FuzzTargetRunner.runOne com.code_intelligence.jazzer.driver.FuzzTargetRunner.startLibFuzzer ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50379

    Affected packages

    Package

    Name: jackson-modules-java8

    Purl: pkg:generic/jackson-modules-java8

    Affected ranges

    Type: GIT

    Events:

    Introduced- 2ed0cf089b61416ad23146a55b3f1fa97e98375b
    Fixed -1cb2f0af1674b7100e6474285c330ef4ac884ff8

    Affected versions

    jackson-modules-java8-2.13.4

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2022-738 | CVE-DB