OSV-2021-453.yaml

id: OSV-2021-453
summary: UNKNOWN WRITE in std::__1::pair<unsigned int, void*> uWS::HttpParser::fenceAndConsumePostPadded<0
details: |
  OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31457

  ```
  Crash type: UNKNOWN WRITE
  Crash state:
  std::__1::pair<unsigned int, void*> uWS::HttpParser::fenceAndConsumePostPadded<0
  uWS::HttpParser::consumePostPadded
  std::__1::__function::__func<LLVMFuzzerTestOneInput::$_0, std::__1::allocator<LL
  ```
modified: '2022-04-13T03:04:41.024750Z'
published: '2021-02-28T00:00:19.863324Z'
references:
- type: REPORT
  url: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31457
affected:
- package:
    name: uwebsockets
    ecosystem: OSS-Fuzz
  ranges:
  - type: GIT
    repo: https://github.com/uNetworking/uWebSockets.git
    events:
    - introduced: 7b330e9e03102ad75b102c9bb75bba573dc70045
    - fixed: 1507f3f98abf6bb56cd5bb26de0776a9e2c2cf36
    - fixed: 4e4fd20b8ce03b30810cdb49b6237fb475c5ae05
  ecosystem_specific:
    severity: HIGH
  versions: []