OSV-2023-310

    Dashboard / Vulnerabilities / OSV-2023-310

    OSV-2023-310

    Published: 13 Apr 2023Last Modified: 22 Apr 2023

    Summary: UNKNOWN READ in memdup_suffix0

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57937 ``` Crash type: UNKNOWN READ Crash state: memdup_suffix0 fuzz-efi-string.c centipede::RunOneInput ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57937

    Affected packages

    Package

    Name: systemd

    Purl: pkg:generic/systemd

    Affected ranges

    Type: GIT

    Events:

    Introduced- 82929336c77ee9e1b0056f25daa6a4210403d1b3
    Fixed -c8ae0a81bfd5669c6da672cdf86119fb07feb575

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2023-310 | CVE-DB