OSV-2022-953

    Dashboard / Vulnerabilities / OSV-2022-953

    OSV-2022-953

    Published: 25 Sept 2022Last Modified: 25 Sept 2022

    Summary: Dynamic-stack-buffer-overflow in rx_icmp

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51757 ``` Crash type: Dynamic-stack-buffer-overflow WRITE {*} Crash state: rx_icmp rx_ip mip_rx ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51757

    Affected packages

    Package

    Name: mongoose

    Purl: pkg:generic/mongoose

    Affected ranges

    Type: GIT

    Events:

    Introduced- e5b0528aca2524d15bf421ce36c64afa8db137c8
    Fixed -9680b8ccb396d0a49b309b3d23787c092c2f6cd7

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2022-953 | CVE-DB