OSV-2021-1562.yaml

id: OSV-2021-1562
summary: Heap-buffer-overflow in __bpf_object__open
details: |
  OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40868

  ```
  Crash type: Heap-buffer-overflow WRITE 4
  Crash state:
  __bpf_object__open
  bpf_object__open_mem
  bpf-object-fuzzer.c
  ```
modified: '2022-12-14T22:22:31.473646Z'
published: '2021-11-11T00:01:42.735141Z'
references:
- type: REPORT
  url: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40868
affected:
- package:
    name: libbpf
    ecosystem: OSS-Fuzz
  ranges:
  - type: GIT
    repo: https://github.com/libbpf/libbpf
    events:
    - introduced: 421213a052aebb0c357b6d0872d6c57f2113800d
    - fixed: 741277511035893c72a34df05da3b943afa747a4
  versions:
  - v0.6.0
  - v0.6.1
  - v0.7.0
  - v0.8.0
  - v0.8.1
  - v1.0.0
  - v1.0.1
  ecosystem_specific:
    severity: HIGH