OSV-2022-902

    Dashboard / Vulnerabilities / OSV-2022-902

    OSV-2022-902

    Published: 17 Sept 2022Last Modified: 17 Sept 2022

    Summary: Invalid-free in function signature specialization <Arg

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51434 ``` Crash type: Invalid-free Crash state: function signature specialization <Arg NIOHTTP1.HTTPDecoder.didFinishHead protocol witness for NIOHTTP1. ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51434

    Affected packages

    Package

    Name: swift-nio

    Purl: pkg:generic/swift-nio

    Affected ranges

    Type: GIT

    Events:

    Introduced- 6918034260d1b0ff46a24a6e3ced445bc2d0ed4b
    Fixed -26afcecdc2142f1cd0d9b7f4d25b3a72938c3368

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2022-902 | CVE-DB