OSV-2022-848

    Dashboard / Vulnerabilities / OSV-2022-848

    OSV-2022-848

    Published: 6 Sept 2022Last Modified: 12 Dec 2022

    Summary: Heap-buffer-overflow in pcpp::HttpRequestFirstLine::parseVersion

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51006 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::HttpRequestFirstLine::parseVersion pcpp::HttpRequestFirstLine::HttpRequestFirstLine pcpp::HttpRequestLayer::HttpRequestLayer ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51006

    Affected packages

    Package

    Name: pcapplusplus

    Purl: pkg:generic/pcapplusplus

    Affected ranges

    Type: GIT

    Events:

    Introduced- fbc52d37c6a7e8cc75e4950d2621cbd907c6cf8a
    Fixed -e9884b9637e171f5e0b846fe55a9a170faa97b3b

    Affected versions

    v21.05

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2022-848 | CVE-DB