{"id":"OSV-2024-1216","summary":"Use-of-uninitialized-value in Poco::Net::NTLMCredentials::parseChallengeMessage","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372764172\n\n```\nCrash type: Use-of-uninitialized-value\nCrash state:\nPoco::Net::NTLMCredentials::parseChallengeMessage\nPoco::Net::HTTPNTLMCredentials::createNTLMMessage\nPoco::Net::HTTPNTLMCredentials::authenticate\n```\n","modified":"2025-03-18T00:32:42.736858Z","published":"2024-10-13T00:11:43.323181Z","references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372764172"}],"affected":[{"package":{"name":"poco","ecosystem":"OSS-Fuzz","purl":"pkg:generic/poco"},"ranges":[{"type":"GIT","repo":"https://github.com/pocoproject/poco","events":[{"introduced":"e55bb7032d20616c3fc22dcdb072ec53c4ef69d6"},{"fixed":"7297033be78f8fab21cce57fceb445e76bdbee26"},{"fixed":"38a1e3096527a43a44051e89d93e14f93153a40d"}]}],"versions":["poco-1.14.0-release"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"fixed_range":"5652837b8f622f2e8d6aad5d286c78587a4a37b4:7297033be78f8fab21cce57fceb445e76bdbee26","introduced_range":"03c35cff930e421199b586c33a00eb6cc537ba28:3a8c6a72b13d1a6ce4e45e4f0f1a428b308b531e","source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/poco/OSV-2024-1216.yaml"}}],"schema_version":"1.7.3"}