Project

General

Profile

Actions
Copy link

Security #4454

closed

Buffer overread in SMTP SMTPParseCommandBDAT

Added by Jeff Lucovsky over 3 years ago. Updated over 3 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Jeff Lucovsky
Target version:
5.0.7
Affected Versions:
5.0.6
Label:
CVE:
Git IDs:

d0dc72e4e5b6d4bac15fb6e0df490efe88e9bb8d

Severity:
MODERATE
Disclosure Date:

Description

Found by oss-fuzz
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33502

Related issues 1 (0 open — 1 closed)

Copied from Suricata - Bug #4436: Buffer overread in SMTP SMTPParseCommandBDATClosedPhilippe AntoineActions
Actions
Copy link
 #1

Updated by Jeff Lucovsky over 3 years ago

  • Copied from Bug #4436: Buffer overread in SMTP SMTPParseCommandBDAT added
Actions
Copy link
 #2

Updated by Jeff Lucovsky over 3 years ago

  • Status changed from Assigned to In Progress

Cherry-pick:
33fa7ab5969d3fc5ca088c003bd4dbfe76d77b6b

Actions
Copy link
 #3

Updated by Jeff Lucovsky over 3 years ago

  • Status changed from In Progress to In Review
Actions
Copy link
 #4

Updated by Victor Julien over 3 years ago

  • Tracker changed from Bug to Security
  • Severity set to MODERATE
Actions
Copy link
 #5

Updated by Victor Julien over 3 years ago

  • Status changed from In Review to Closed
  • Affected Versions 5.0.6 added
  • Affected Versions deleted (6.0.3)
Actions
Copy link
 #6

Updated by Victor Julien over 3 years ago

  • Git IDs updated (diff)
Actions
Copy link
 #7

Updated by Victor Julien over 3 years ago

  • Private changed from Yes to No
Actions
Copy link

Also available in: Atom PDF