OSV-2020-945.yaml

id: OSV-2020-945
summary: Heap-buffer-overflow in pcpp::SSLExtension::getLength
details: |
  OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22529

  ```
  Crash type: Heap-buffer-overflow READ 2
  Crash state:
  pcpp::SSLExtension::getLength
  pcpp::SSLExtension::getTotalLength
  pcpp::SSLServerHelloMessage::SSLServerHelloMessage
  ```
modified: '2022-04-13T03:04:38.634432Z'
published: '2020-07-22T00:00:22.089556Z'
references:
- type: REPORT
  url: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22529
affected:
- package:
    name: pcapplusplus
    ecosystem: OSS-Fuzz
  ranges:
  - type: GIT
    repo: https://github.com/seladb/PcapPlusPlus
    events:
    - introduced: 4366d2f86bf105025765a0ce3db6e647ba0f3508
    - fixed: 50aab202d24331ef35b9eff68d96ef9f97baf6a1
  ecosystem_specific:
    introduced_range: unknown:4366d2f86bf105025765a0ce3db6e647ba0f3508
    severity: MEDIUM
  versions: []