10 matches found
CVE-2026-13588
A vulnerability was determined in seladb PcapPlusPlus 25.05. The impacted element is the function pcpp::SSLClientHelloMessage::getHandshakeVersion of the file Packet++/src/SSLHandshake.cpp of the component TLS Hello Handler. Executing a manipulation of the argument handshakeVersion can lead to...
CVE-2026-13588: Heap-based Buffer Overflow
A vulnerability was determined in seladb PcapPlusPlus 25.05. The impacted element is the function pcpp::SSLClientHelloMessage::getHandshakeVersion of the file Packet++/src/SSLHandshake.cpp of the component TLS Hello Handler. Executing a manipulation of the argument handshakeVersion can lead to...
PT-2025-54604
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=472222304 Crash type: Heap-buffer-overflow READ 1 Crash state: unsigned char std:: 1::vectorunsigned char, std:: 1::allocatorunsigned char pcpp::TLSECPointFormatExtension::getECPointFormatList...
OSV-2024-816 Use-of-uninitialized-value in pcpp::SSLClientHelloMessage::ClientHelloTLSFingerprint::toString
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69006 Crash type: Use-of-uninitialized-value Crash state: pcpp::SSLClientHelloMessage::ClientHelloTLSFingerprint::toString pcpp::SSLClientHelloMessage::ClientHelloTLSFingerprint::toStringAndMD5...
PT-2024-40850
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the toString, toStringAndMD5, and toMD5 functions of the...
OSV-2023-1232 Heap-buffer-overflow in pcpp::TLSECPointFormatExtension::getECPointFormatList
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64543 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::TLSECPointFormatExtension::getECPointFormatList pcpp::SSLClientHelloMessage::generateTLSFingerprint readParsedPacket...
OSV-2023-1153 Heap-buffer-overflow in pcpp::SSLClientHelloMessage::getCipherSuite
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64124 Crash type: Heap-buffer-overflow READ 2 Crash state: pcpp::SSLClientHelloMessage::getCipherSuite readParsedPacket FuzzTarget.cpp...
pcapplusplus:FuzzTarget: Heap-buffer-overflow in pcpp::SSLClientHelloMessage::SSLClientHelloMessage
Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=6303327798034432 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash...
PT-2020-22658
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the pcpp::SSLClientHelloMessage::getSessionIDLength...
pcapplusplus:FuzzTarget: Use-of-uninitialized-value in pcpp::SSLClientHelloMessage::getSessionIDLength
Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=4865272770199552 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...