OSV-2023-896

    Dashboard / Vulnerabilities / OSV-2023-896

    OSV-2023-896

    Published: 23 Sept 2023Last Modified: 23 Sept 2023

    Summary: UNKNOWN READ in deliver_chunked_chunks

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62609 ``` Crash type: UNKNOWN READ Crash state: deliver_chunked_chunks http_cb fuzz.c ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62609

    Affected packages

    Package

    Name: mongoose

    Purl: pkg:generic/mongoose

    Affected ranges

    Type: GIT

    Events:

    Introduced- ea3968601ea6ef47d71fc4c756ea782dd6a88d01
    Fixed -f552d15fe4f2e4f93a7077d95856979ccceaba93

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2023-896 | CVE-DB