OSV-2020-943 Heap-buffer-overflow in pcpp::HeaderField::HeaderField

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22528 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::HeaderField::HeaderField pcpp::TextBasedProtocolMessage::parseFields pcpp::SipResponseLayer::SipResponseLayer...

OSV-2020-930 Use-of-uninitialized-value in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22087 Crash type: Use-of-uninitialized-value Crash state: std::1::basicstring, std::1::allocatorch pcpp::IDnsResource::IDnsResource pcpp::DnsQuery::DnsQuery...

PT-2020-21731

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the pcpp::tbp my own strnlen, pcpp::HeaderField::HeaderField, and...

PT-2020-21710

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the pcpp::IDnsResource::decodeName function, which is call...

PT-2020-21782

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the pcpp::Packet::createFirstLayer and...

PT-2020-21762

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 4 crash occurred, specifically in the pcpp::IPv4Layer::getSrcIpAddress function, as reported by OSS-Fuzz. Recommendations At th...

PT-2020-21781

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the pcpp::NullLoopbackLayer::getFamily function, which is...

PT-2020-21814

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the involvement of pcpp::DnsResource::getDataLength,...

PT-2020-21820

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue is identified, potentially causing a crash. The crash occurs in the getExtensionLen function of pcpp::IPv6Extension, whic...

PT-2020-21834

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue is identified, potentially causing a crash. The crash occurs in the...

PT-2020-21825

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the involvement of pcpp::IPv4Layer functions such as...

PT-2020-22640

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue is identified, potentially causing a crash. The crash occurs in the pcpp::SSLExtension::getLength and...

PT-2020-22653

Name of the Vulnerable Software and Affected Versions No specific software or version information is provided in the given input. Description A heap-buffer-overflow READ 1 crash has been reported. The crash occurs in the pcpp::HeaderField::HeaderField function, which is called by...

PT-2020-22633

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of "Use-of-uninitialized-value". The crash state involves the std:: 1::basic string and the pcpp::IDnsResource and...

PT-2020-22658

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the pcpp::SSLClientHelloMessage::getSessionIDLength...

PT-2020-22629

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap buffer overflow read issue is identified, related to the pcpp::SSLServerHelloMessage and pcpp::SSLHandshakeMessage functions. The crash occurs when...

PT-2020-22639

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash occurs in the pcpp::HeaderField::HeaderField function, which is called by...

PT-2020-21760

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of Use-of-uninitialized-value. The crash occurs in the pcpp::NullLoopbackLayer::parseNextLayer function, which is call...

OSV-2020-772 Heap-buffer-overflow in __libcpp_strstr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23601 Crash type: Heap-buffer-overflow READ 4 Crash state: libcppstrstr strstr pcpp::SipRequestFirstLine::parseVersion...

PT-2020-22529

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 4 crash has been reported. The crash occurs in the libcpp strstr function, which is called by strstr and...