OSV-2020-420.yaml

id: OSV-2020-420
summary: UNKNOWN WRITE in uffd_cleanup
details: |
  OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15156

  ```
  Crash type: UNKNOWN WRITE
  Crash state:
  uffd_cleanup
  netCDFDataset::~netCDFDataset
  netCDFDataset::~netCDFDataset
  ```
modified: '2022-04-13T03:04:42.095380Z'
published: '2020-07-01T00:00:08.489132Z'
references:
- type: REPORT
  url: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15156
affected:
- package:
    name: gdal
    ecosystem: OSS-Fuzz
  ranges:
  - type: GIT
    repo: https://github.com/OSGeo/gdal
    events:
    - introduced: 38c1e385e81223476828d57aa83af5716a9256b7
    - fixed: 767e3a56144f676ca738ef8f700e0e56035bd05a
    - introduced: 27b9bf644bcf1208f7d6594bdd104cc8a8bb0646
  versions:
  - v2.4.2
  - v2.4.3
  - v2.4.3RC1
  - v2.4.4
  - v2.4.4RC1
  - v3.0.1
  - v3.0.2
  - v3.0.2RC1
  - v3.0.3
  - v3.0.3RC1
  - v3.0.4
  - v3.0.4RC1
  ecosystem_specific:
    severity: HIGH
    introduced_range: 289b796e365ac26020548410d6ae16022bc80718:f956a3c6ff43a877a63ee1199c5e0092c11a8c31