{"id":"OSV-2021-1756","summary":"Heap-buffer-overflow in Curl_sasl_decode_mech","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42901\n\n```\nCrash type: Heap-buffer-overflow READ 10\nCrash state:\nCurl_sasl_decode_mech\nCurl_sasl_parse_url_auth_option\npop3_parse_url_options\n```\n","modified":"2022-04-13T03:04:42.912178Z","published":"2021-12-25T00:01:47.005391Z","references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42901"}],"affected":[{"package":{"name":"curl","ecosystem":"OSS-Fuzz","purl":"pkg:generic/curl"},"ranges":[{"type":"GIT","repo":"https://github.com/curl/curl.git","events":[{"introduced":"1b9f1f60559979a644cc9cf26f851c4416f20248"},{"fixed":"193053e2edf302d176e4c7592e9d6aac60442c5c"}]}],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"introduced_range":"ef4dc1b5be8c092550617ea0f1b9844a9cdc6ae8:2c1dbc1af0a774ae5dce08150131a01e862c13b5","source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/curl/OSV-2021-1756.yaml"}}],"schema_version":"1.7.3"}