OSV-2018-156.yaml

id: OSV-2018-156
summary: Heap-buffer-overflow in dotnet_parse_us
details: |
  OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11945

  ```
  Crash type: Heap-buffer-overflow READ 1
  Crash state:
  dotnet_parse_us
  dotnet_parse_com
  dotnet__load
  ```
modified: '2022-04-13T03:04:42.270609Z'
published: '2021-01-13T00:01:07.126725Z'
references:
- type: REPORT
  url: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11945
affected:
- package:
    name: yara
    ecosystem: OSS-Fuzz
  ranges:
  - type: GIT
    repo: https://github.com/VirusTotal/yara.git
    events:
    - introduced: aa182b4f928e54189fe51606d4dc419e7b27022f
    - fixed: 7493247020e24407f120b6b29f6dd43c883e2f21
  ecosystem_specific:
    severity: MEDIUM
  versions: []