{"id": "OSSFUZZ-5013", "type": "ossfuzz", "bulletinFamily": "software", "title": "unrar/unrar_fuzzer: Index-out-of-bounds in Unpack::LongLZ", "description": "Project:\nhttps://github.com/aawc/unrar.git\n\nDetailed report: https://oss-fuzz.com/testcase?key=4683334295748608\n\nProject: unrar\nFuzzer: libFuzzer_unrar_fuzzer\nFuzz target binary: unrar_fuzzer\nJob Type: libfuzzer_ubsan_unrar\nPlatform Id: linux\n\nCrash Type: Index-out-of-bounds\nCrash Address: \nCrash State:\n Unpack::LongLZ\n Unpack::Unpack15\n CmdExtract::ExtractCurrentFile\n \nSanitizer: undefined (UBSAN)\n\nRecommended Security Severity: Medium\n\nReproducer Testcase: https://oss-fuzz.com/download?testcase_id=4683334295748608\n\nIssue filed automatically.\n\nSee https://github.com/google/oss-fuzz/blob/master/docs/reproducing.md for more information.\n\nThis bug is subject to a 90 day disclosure deadline. If 90 days elapse\nwithout an upstream patch, then the bug report will automatically\nbecome visible to the public.\n\nWhen you fix this bug, please\n * mention the fix revision(s).\n * state whether the bug was a short-lived regression or an old bug in any stable releases.\n * add any other useful information.\nThis information can help downstream consumers.\n\nIf you have questions for the OSS-Fuzz team, please file an issue at https://github.com/google/oss-fuzz/issues.", "published": "2018-01-07T09:39:50", "modified": "2018-02-24T16:21:52", "cvss": {}, "href": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5013", "reporter": "Google", "references": [], "cvelist": [], "lastseen": "2020-04-03T14:01:11", "viewCount": 0, "enchantments": {"dependencies": {"references": [], "modified": "2020-04-03T14:01:11", "rev": 2}, "score": {"value": -0.5, "vector": "NONE", "modified": "2020-04-03T14:01:11", "rev": 2}, "vulnersScore": -0.5}, "ossfuzz": {"issue": 5013, "status": "Verified", "project": "unrar", "ref": "https://oss-fuzz.com/revisions?job=libfuzzer_ubsan_unrar&range=201801240558:201801250557", "crashType": "Index-out-of-bounds", "revisions": ["0ff832d31470471803b175cfff4e40c1b08ee779:9866c9649507f177233ca96feefac8b12e36a91f"], "project_repos": ["https://github.com/aawc/unrar.git"], "tags": ["5.7.3", "5.7.1", "5.6.8", "5.6.1.8.1", "5.6.1.8", "5.6.1.7", "5.6.1.5", "5.6.1.4", "5.6.1.3", "5.6.1.2", "5.5.8"]}, "affectedSoftware": [{"name": "unrar", "version": "5.6.1.4", "operator": "eq"}, {"name": "unrar", "version": "5.6.1.3", "operator": "eq"}, {"name": "unrar", "version": "5.6.1.2", "operator": "eq"}, {"name": "unrar", "version": "5.5.8", "operator": "eq"}], "immutableFields": []}

{}