OSV-2023-743

    Dashboard / Vulnerabilities / OSV-2023-743

    OSV-2023-743

    Published: 26 Aug 2023Last Modified: 27 Aug 2023

    Summary: Out-of-memory in QueryParserFuzzer

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61742 ``` Crash type: Out-of-memory Crash state: QueryParserFuzzer ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61742

    Affected packages

    Package

    Name: lucene

    Purl: pkg:generic/lucene

    Affected ranges

    Type: GIT

    Events:

    Introduced- cce33b07e4f545ae4442c743c5023df1fb5d8fb9
    Fixed -16e4874bb91b7035b075c1a0620e9fb65733f7e3

    Affected versions

    releases/lucene/9.6.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2023-743 | CVE-DB