OSV-2023-980

    Dashboard / Vulnerabilities / OSV-2023-980

    OSV-2023-980

    Published: 7 Oct 2023Last Modified: 7 Oct 2023

    Summary: UNKNOWN READ in skip_chunk

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63051 ``` Crash type: UNKNOWN READ Crash state: skip_chunk http_cb fuzz.c ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63051

    Affected packages

    Package

    Name: mongoose

    Purl: pkg:generic/mongoose

    Affected ranges

    Type: GIT

    Events:

    Introduced- 7884a2f3c747aaa39c28e9ea99cf9f657e0fe3e2
    Fixed -744df7b2443032e9d342055da12c634150b17c29

    Affected versions

    7.12

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2023-980 | CVE-DB