OSV-2023-322

    Dashboard / Vulnerabilities / OSV-2023-322

    OSV-2023-322

    Published: 17 Apr 2023Last Modified: 17 Apr 2023

    Summary: Use-after-poison in str_new_frozen_buffer

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58079 ``` Crash type: Use-after-poison READ 8 Crash state: str_new_frozen_buffer fstr_update_callback rb_st_update ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58079

    Affected packages

    Package

    Name: ruby

    Purl: pkg:generic/ruby

    Affected ranges

    Type: GIT

    Events:

    Introduced- 19aa30d5d515cd602211d4708e709913d5a136e1
    Fixed -628e432739e1d2578d357420aa652a97eb8c2649

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2023-322 | CVE-DB