marius/Open_Ultra_SAST
1
0
Fork 0
mirror of https://github.com/norandom/OpenUltraSAST.git synced 2026-10-16 19:59:26 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
5abc6cd6f6757f6de3aec81cdaf23514ea856419
Open_Ultra_SAST/benchmarks/pairs/vfc/catalog.toml
T
Marius CiepluchandClaude Opus 5 2dad25d312 fix(learning-harness): the round-4 review findings 
Three defects, two of them the same shape as ones already rejected once:

- The meta-agent proposer still could not propose. `MetaAgent(inner_model=)`
  takes a ModelConfig; it was handed a model name, a `# type: ignore` hid
  that from mypy, and a bare `except Exception` turned the resulting
  AttributeError into `meta_agent_failed` -- which reads exactly like the
  model declining. The composition is now a seam a test can pin, and a
  construction error is re-raised rather than reported as a quiet round.
- `ousast pairs --hunter` crashed in its documented form: the K floor landed
  with `--k-runs` still defaulting to 1. The covering test always passed
  `--k-runs 4`, which is why nothing noticed.
- 28 rows (12% of the corpus) resolved a span on the vulnerable side and
  none on the fixed side, so every fixed-side finding read as outside the
  labeled function and the pair scored as silence whatever the detector
  said. `fix_function` now reaches the catalog and the scorer, and the
  generator derives it from the fixed excerpt for the 25 trap rows that
  never declared one. Measured after: 0 rows.

Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>
Claude-Session: https://claude.ai/code/session_01T7XD7x5KonMdmGRkp63EQG
2026-09-06 14:03:10 +02:00

5466 lines
150 KiB
TOML
Raw Blame History

# vfc pair slice. Reviewed isolated functions with provenance.
# Honesty dashboard — not the local 100% CI gate.
# Do not add these names to LANGUAGE_MANIFESTS.
# Regenerated by benchmarks/pairs/catalog_gen.py from recipes.toml.
[[pair]]
name = "openssl-cve-2014-0160"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "OpenSSL License"
repo = "openssl/openssl"
cve = "CVE-2014-0160"
cwe = "CWE-126"
commit = "96db9023b881d7cd9f379b0c154650d6c108e9a3"
parent = "0d7717fc9c83dafab8153cbd5e2180e6e04cc802"
commit_url = "https://github.com/openssl/openssl/commit/96db9023b881d7cd9f379b0c154650d6c108e9a3"
vuln = "openssl-cve-2014-0160/vuln.c"
fixed = "openssl-cve-2014-0160/fixed.c"
relpath = "ssl/t1_lib.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2014"
[[pair.expected]]
cwe = "CWE-126"
class = "buffer over-read"
path = "ssl/t1_lib.c"
function = "tls1_process_heartbeat"
mechanism = "unchecked_length_copy"
rule_id = "c-unsafe-memory-copy"
sink = "memcpy"
evidence = "memcpy copies heartbeat payload using an attacker-controlled length"
[[pair]]
name = "firefox-cve-2020-15667"
slice = "vfc"
language = "c_cpp"
origin = "mozilla-central"
license = "MPL-2.0"
repo = "mozilla-central"
cve = "CVE-2020-15667"
cwe = "CWE-119"
commit = "b79b6cc78248eea7fda10bfb76aa273c19c9fa65"
parent = "0c0f777161a9499dd149853ff62d356f75d16c2a"
commit_url = "https://hg.mozilla.org/mozilla-central/rev/b79b6cc78248eea7fda10bfb76aa273c19c9fa65"
vuln = "firefox-cve-2020-15667/vuln.c"
fixed = "firefox-cve-2020-15667/fixed.c"
relpath = "modules/libmar/src/mar_read.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2020"
[[pair.expected]]
cwe = "CWE-119"
class = "buffer overflow"
path = "modules/libmar/src/mar_read.c"
function = "mar_insert_item"
mechanism = "unchecked_length_copy"
rule_id = "c-unsafe-memory-copy"
sink = "memcpy"
evidence = "memcpy copies a MAR index name using a signed namelen that can wrap"
[[pair]]
name = "chromium-cve-2019-5786"
slice = "vfc"
language = "c_cpp"
origin = "chromium"
license = "BSD-3-Clause"
repo = "chromium/chromium"
cve = "CVE-2019-5786"
cwe = "CWE-416"
commit = "ba9748e78ec7e9c0d594e7edf7b2c07ea2a90449"
parent = "9f3fccdba567f30ea39b08f57d8d5b49cd832b4a"
commit_url = "https://github.com/chromium/chromium/commit/ba9748e78ec7e9c0d594e7edf7b2c07ea2a90449"
vuln = "chromium-cve-2019-5786/vuln.cc"
fixed = "chromium-cve-2019-5786/fixed.cc"
relpath = "third_party/blink/renderer/core/fileapi/file_reader_loader.cc"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2019"
[[pair.expected]]
cwe = "CWE-416"
class = "use after free"
path = "third_party/blink/renderer/core/fileapi/file_reader_loader.cc"
function = "ArrayBufferResult"
mechanism = "uaf"
rule_id = "c-unsafe-memory-copy"
sink = "ToArrayBuffer"
evidence = "ArrayBufferResult can return two references to the same underlying ArrayBuffer"
[[pair]]
name = "openssl-cve-2020-1967"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "OpenSSL License"
repo = "openssl/openssl"
cve = "CVE-2020-1967"
cwe = "CWE-476"
commit = "a87f3fe01a5a894aa27ccd6a239155fd129988e4"
parent = "3656c08ab4b1b892730cb5e808b6f4298b08a2e6"
commit_url = "https://github.com/openssl/openssl/commit/a87f3fe01a5a894aa27ccd6a239155fd129988e4"
vuln = "openssl-cve-2020-1967/vuln.c"
fixed = "openssl-cve-2020-1967/fixed.c"
relpath = "ssl/t1_lib.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2020"
[[pair.expected]]
cwe = "CWE-476"
class = "null pointer dereference"
path = "ssl/t1_lib.c"
function = "tls1_check_sig_alg"
mechanism = "null_deref_unguarded"
sink = "tls1_check_sig_alg"
evidence = "SSL_check_chain / tls1_check_sig_alg can dereference NULL in TLS 1.3"
[[pair]]
name = "openssl-cve-2020-1971"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "OpenSSL License"
repo = "openssl/openssl"
cve = "CVE-2020-1971"
cwe = "CWE-476"
commit = "b33c48b75aaf33c93aeda42d7138616b9e6a64cb"
parent = "198b11683568452282bd48828fcf60d4835bf327"
commit_url = "https://github.com/openssl/openssl/commit/b33c48b75aaf33c93aeda42d7138616b9e6a64cb"
vuln = "openssl-cve-2020-1971/vuln.c"
fixed = "openssl-cve-2020-1971/fixed.c"
relpath = "crypto/x509/v3_genn.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2020"
[[pair.expected]]
cwe = "CWE-476"
class = "null pointer dereference"
path = "crypto/x509/v3_genn.c"
function = "GENERAL_NAME_cmp"
mechanism = "null_deref_unguarded"
sink = "GENERAL_NAME_cmp"
evidence = "GENERAL_NAME_cmp mishandles EdiPartyName comparison"
[[pair]]
name = "openssl-cve-2021-23840"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "OpenSSL License"
repo = "openssl/openssl"
cve = "CVE-2021-23840"
cwe = "CWE-190"
commit = "c9fb704cf3af5524eb8e79961e31b60eee8c3c47"
parent = "c1ddd392cf9737c09c1f9bf690adfbe596403c5e"
commit_url = "https://github.com/openssl/openssl/commit/c9fb704cf3af5524eb8e79961e31b60eee8c3c47"
vuln = "openssl-cve-2021-23840/vuln.c"
fixed = "openssl-cve-2021-23840/fixed.c"
relpath = "crypto/evp/evp_enc.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-190"
class = "integer overflow"
path = "crypto/evp/evp_enc.c"
function = "evp_EncryptDecryptUpdate"
mechanism = "signed_size_operand"
sink = "EVP_CipherUpdate"
evidence = "EVP_CipherUpdate output length can overflow"
[[pair]]
name = "openssl-cve-2021-3711"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "OpenSSL License"
repo = "openssl/openssl"
cve = "CVE-2021-3711"
cwe = "CWE-120"
commit = "59f5e75f3bced8fc0e130d72a3f582cf7b480b46"
parent = "8c74c9d1ade0fbdab5b815ddb747351b8b839641"
commit_url = "https://github.com/openssl/openssl/commit/59f5e75f3bced8fc0e130d72a3f582cf7b480b46"
vuln = "openssl-cve-2021-3711/vuln.c"
fixed = "openssl-cve-2021-3711/fixed.c"
relpath = "crypto/sm2/sm2_crypt.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-120"
class = "buffer overflow"
path = "crypto/sm2/sm2_crypt.c"
function = "sm2_plaintext_size"
mechanism = "unchecked_length_copy"
sink = "sm2_decrypt"
evidence = "SM2 plaintext size is underestimated so the second EVP_PKEY_decrypt overflows"
[[pair]]
name = "openssl-cve-2021-3712"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "OpenSSL License"
repo = "openssl/openssl"
cve = "CVE-2021-3712"
cwe = "CWE-125"
commit = "98624776c4d501c8badd6f772ab7048ac9191cb9"
parent = "1f365708a3318a5f1a395f90c38b584a58d37fb9"
commit_url = "https://github.com/openssl/openssl/commit/98624776c4d501c8badd6f772ab7048ac9191cb9"
vuln = "openssl-cve-2021-3712/vuln.c"
fixed = "openssl-cve-2021-3712/fixed.c"
relpath = "crypto/x509/v3_utl.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-125"
class = "buffer over-read"
path = "crypto/x509/v3_utl.c"
function = "append_ia5"
mechanism = "unchecked_length_copy"
sink = "append_ia5"
evidence = "append_ia5 assumes NUL-terminated ASN.1 strings"
[[pair]]
name = "openssl-cve-2022-0778"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2022-0778"
cwe = "CWE-835"
commit = "9eafb53614bf65797db25f467946e735e1b43dc9"
parent = "1832bb0f02e519a48f06a10467c7ce5f7f3feeeb"
commit_url = "https://github.com/openssl/openssl/commit/9eafb53614bf65797db25f467946e735e1b43dc9"
vuln = "openssl-cve-2022-0778/vuln.c"
fixed = "openssl-cve-2022-0778/fixed.c"
relpath = "crypto/bn/bn_sqrt.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2022"
[[pair.expected]]
cwe = "CWE-835"
class = "infinite loop"
path = "crypto/bn/bn_sqrt.c"
function = "BN_mod_sqrt"
mechanism = "other"
sink = "BN_mod_sqrt"
evidence = "BN_mod_sqrt can loop forever on crafted moduli"
[[pair]]
name = "openssl-cve-2022-1292"
slice = "vfc"
language = "unknown"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2022-1292"
cwe = "CWE-78"
commit = "1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2"
parent = "7d56a74a96828985db7354a55227a511615f732b"
commit_url = "https://github.com/openssl/openssl/commit/1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2"
vuln = "openssl-cve-2022-1292/vuln.in"
fixed = "openssl-cve-2022-1292/fixed.in"
relpath = "tools/c_rehash.in"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2022"
[[pair.expected]]
cwe = "CWE-78"
class = "command injection"
path = "tools/c_rehash.in"
function = "link_hash_cert"
mechanism = "source_reaches_sink"
sink = "backtick"
evidence = "c_rehash interpolates certificate filenames into a shell backtick command"
[[pair]]
name = "openssl-cve-2022-3602"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2022-3602"
cwe = "CWE-787"
commit = "3b421ebc64c7b52f1b9feb3812bdc7781c784332"
parent = "89d72311327735ef15c804d2adea84a0fb1bfa0a"
commit_url = "https://github.com/openssl/openssl/commit/3b421ebc64c7b52f1b9feb3812bdc7781c784332"
vuln = "openssl-cve-2022-3602/vuln.c"
fixed = "openssl-cve-2022-3602/fixed.c"
relpath = "crypto/punycode.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2022"
[[pair.expected]]
cwe = "CWE-787"
class = "buffer overflow"
path = "crypto/punycode.c"
function = "ossl_punycode_decode"
mechanism = "unchecked_length_copy"
sink = "ossl_punycode_decode"
evidence = "punycode decoder can write past the output buffer"
[[pair]]
name = "openssl-cve-2022-3786"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2022-3786"
cwe = "CWE-787"
commit = "680e65b94c916af259bfdc2e25f1ab6e0c7a97d6"
parent = "3b421ebc64c7b52f1b9feb3812bdc7781c784332"
commit_url = "https://github.com/openssl/openssl/commit/680e65b94c916af259bfdc2e25f1ab6e0c7a97d6"
vuln = "openssl-cve-2022-3786/vuln.c"
fixed = "openssl-cve-2022-3786/fixed.c"
relpath = "crypto/punycode.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2022"
[[pair.expected]]
cwe = "CWE-787"
class = "buffer overflow"
path = "crypto/punycode.c"
function = "ossl_punycode_decode"
mechanism = "unchecked_length_copy"
sink = "ossl_punycode_decode"
evidence = "punycode decoder can overflow a stack buffer via a crafted email name"
[[pair]]
name = "openssl-cve-2023-0286"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2023-0286"
cwe = "CWE-843"
commit = "7880536fe17c2b5450e279155bedd51771d28c9f"
parent = "adf77d6657e836fc87391fad53d857927a764297"
commit_url = "https://github.com/openssl/openssl/commit/7880536fe17c2b5450e279155bedd51771d28c9f"
vuln = "openssl-cve-2023-0286/vuln.c"
fixed = "openssl-cve-2023-0286/fixed.c"
relpath = "crypto/x509/v3_genn.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2023"
[[pair.expected]]
cwe = "CWE-843"
class = "type confusion"
path = "crypto/x509/v3_genn.c"
function = "GENERAL_NAME_cmp"
mechanism = "type_confusion"
sink = "GENERAL_NAME_cmp"
evidence = "GENERAL_NAME_cmp type-confuses x400Address"
[[pair]]
name = "curl-cve-2023-38545"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2023-38545"
cwe = "CWE-122"
commit = "fb4415d8aee6c1045be932a34fe6107c2f5ed147"
parent = "09e25b9d94f4106eac8ca3a43b221bdc66f405e4"
commit_url = "https://github.com/curl/curl/commit/fb4415d8aee6c1045be932a34fe6107c2f5ed147"
vuln = "curl-cve-2023-38545/vuln.c"
fixed = "curl-cve-2023-38545/fixed.c"
relpath = "lib/socks.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2023"
[[pair.expected]]
cwe = "CWE-122"
class = "heap buffer overflow"
path = "lib/socks.c"
function = "do_SOCKS5"
mechanism = "unchecked_length_copy"
rule_id = "c-unsafe-memory-copy"
sink = "memcpy"
evidence = "SOCKS5 remote-resolve copies a hostname that can exceed the local buffer"
[[pair]]
name = "chromium-cve-2022-2162"
slice = "vfc"
language = "c_cpp"
origin = "chromium"
license = "BSD-3-Clause"
repo = "chromium/chromium"
cve = "CVE-2022-2162"
cwe = "CWE-20"
commit = "22c61cfae5d1b37c773e638d342488ae11118b51"
parent = "a07d0ae0a7dc68686adca10dcf11138cb2f4ab6d"
commit_url = "https://github.com/chromium/chromium/commit/22c61cfae5d1b37c773e638d342488ae11118b51"
vuln = "chromium-cve-2022-2162/vuln.cc"
fixed = "chromium-cve-2022-2162/fixed.cc"
relpath = "content/browser/file_system_access/file_system_chooser.cc"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2022"
[[pair.expected]]
cwe = "CWE-20"
class = "insufficient input validation"
path = "content/browser/file_system_access/file_system_chooser.cc"
function = "IsShellIntegratedExtension"
mechanism = "validation_strength"
sink = "IsShellIntegratedExtension"
evidence = "File System Access suggested names did not sanitize Windows .url shell extensions"
[[pair]]
name = "openssl-cve-2025-69421"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2025-69421"
cwe = "CWE-476"
commit = "2c13bf15286328641a805eb3b7c97e27d42881fb"
parent = "ea8fc4c345fbd749048809c9f7c881ea656b0b94"
commit_url = "https://github.com/openssl/openssl/commit/2c13bf15286328641a805eb3b7c97e27d42881fb"
vuln = "openssl-cve-2025-69421/vuln.c"
fixed = "openssl-cve-2025-69421/fixed.c"
relpath = "crypto/pkcs12/p12_decr.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_function = "OSSL_TRACE_BEGIN"
fix_date = "2025"
[[pair.expected]]
cwe = "CWE-476"
class = "null pointer dereference"
path = "crypto/pkcs12/p12_decr.c"
function = "PKCS12_item_decrypt_d2i_ex"
mechanism = "null_deref_unguarded"
sink = "PKCS12_item_decrypt_d2i_ex"
evidence = "PKCS12_item_decrypt_d2i_ex did not check a NULL oct argument"
[[pair]]
name = "openssl-cve-2025-66199"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2025-66199"
cwe = "CWE-770"
commit = "84f73f79af9f69c1527a9a372b7a9e771a394c2a"
parent = "b21663c35a6f0ed4c8de06855bdc7a6a21f00c2f"
commit_url = "https://github.com/openssl/openssl/commit/84f73f79af9f69c1527a9a372b7a9e771a394c2a"
vuln = "openssl-cve-2025-66199/vuln.c"
fixed = "openssl-cve-2025-66199/fixed.c"
relpath = "ssl/statem/statem_lib.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2025"
[[pair.expected]]
cwe = "CWE-770"
class = "uncontrolled allocation"
path = "ssl/statem/statem_lib.c"
function = "tls13_process_compressed_certificate"
mechanism = "unchecked_alloc_size"
sink = "tls13_process_compressed_certificate"
evidence = "TLS 1.3 compressed certificate length was trusted before allocation"
[[pair]]
name = "firefox-bug-2058173"
slice = "vfc"
language = "c_cpp"
origin = "mozilla-firefox/firefox"
license = "MPL-2.0"
repo = "mozilla-firefox/firefox"
cve = "BUG-2058173"
cwe = "CWE-770"
commit = "e46f28da1cd3a5d46a2680b3d87361e9e8de4ae6"
parent = "eed0931f85474d0db6e2326dfd9718c6bf1cd418"
commit_url = "https://github.com/mozilla-firefox/firefox/commit/e46f28da1cd3a5d46a2680b3d87361e9e8de4ae6"
vuln = "firefox-bug-2058173/vuln.c"
fixed = "firefox-bug-2058173/fixed.c"
relpath = "modules/libmar/src/mar_read.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-770"
class = "uncontrolled allocation"
path = "modules/libmar/src/mar_read.c"
function = "mar_read_index"
mechanism = "unchecked_alloc_size"
sink = "malloc"
evidence = "mar_read_index malloc'd an untrusted MAR index size with no upper bound"
[[pair]]
name = "openssl-cve-2026-18798"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2026-18798"
cwe = "CWE-119"
commit = "70cebd74d3592f5272945501b58a60374c4e13af"
parent = "48f5785425ee6b5316f8e5f921978397ba632cc6"
commit_url = "https://github.com/openssl/openssl/commit/70cebd74d3592f5272945501b58a60374c4e13af"
vuln = "openssl-cve-2026-18798/vuln.c"
fixed = "openssl-cve-2026-18798/fixed.c"
relpath = "ssl/quic/quic_port.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "ssl/quic/quic_port.c"
function = "port_default_packet_handler"
mechanism = "other"
sink = "unknown"
evidence = "Avoid double free of qrx in port_default_packet_handler()"
[[pair]]
name = "openssl-cve-2026-54874"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2026-54874"
cwe = "CWE-119"
commit = "1ca5a124b48f1ffe6980ad33724b452fbd62da1e"
parent = "a0c8ec557d9cac078f032d76cdf684fe743eb382"
commit_url = "https://github.com/openssl/openssl/commit/1ca5a124b48f1ffe6980ad33724b452fbd62da1e"
vuln = "openssl-cve-2026-54874/vuln.c"
fixed = "openssl-cve-2026-54874/fixed.c"
relpath = "ssl/record/rec_layer_d1.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "ssl/record/rec_layer_d1.c"
function = "DTLS_RECORD_LAYER_clear"
mechanism = "other"
sink = "unknown"
evidence = "Avoid full read buffer allocation when buffering DTLS records"
[[pair]]
name = "openssl-cve-2026-54874-dtls1_process_record"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2026-54874"
cwe = "CWE-119"
commit = "1ca5a124b48f1ffe6980ad33724b452fbd62da1e"
parent = "a0c8ec557d9cac078f032d76cdf684fe743eb382"
commit_url = "https://github.com/openssl/openssl/commit/1ca5a124b48f1ffe6980ad33724b452fbd62da1e"
vuln = "openssl-cve-2026-54874-dtls1_process_record/vuln.c"
fixed = "openssl-cve-2026-54874-dtls1_process_record/fixed.c"
relpath = "ssl/record/ssl3_record.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "ssl/record/ssl3_record.c"
function = "dtls1_process_record"
mechanism = "other"
sink = "unknown"
evidence = "Avoid full read buffer allocation when buffering DTLS records"
[[pair]]
name = "openssl-cve-2026-54874-dtls_rlayer_buffer_recor"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2026-54874"
cwe = "CWE-119"
commit = "7110cb2f75806d0bf809eb2f90790d477900be40"
parent = "9ec2f6d2ae2bcad907cf7ee38584855bafe4979a"
commit_url = "https://github.com/openssl/openssl/commit/7110cb2f75806d0bf809eb2f90790d477900be40"
vuln = "openssl-cve-2026-54874-dtls_rlayer_buffer_recor/vuln.c"
fixed = "openssl-cve-2026-54874-dtls_rlayer_buffer_recor/fixed.c"
relpath = "ssl/record/methods/dtls_meth.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "ssl/record/methods/dtls_meth.c"
function = "dtls_rlayer_buffer_record"
mechanism = "other"
sink = "unknown"
evidence = "Avoid full read buffer allocation when buffering DTLS next-epoch records"
[[pair]]
name = "openssl-cve-2026-63072"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2026-63072"
cwe = "CWE-119"
commit = "a0c8ec557d9cac078f032d76cdf684fe743eb382"
parent = "d307f61f1b341b6eb7d5d07bd6902a939c709bc6"
commit_url = "https://github.com/openssl/openssl/commit/a0c8ec557d9cac078f032d76cdf684fe743eb382"
vuln = "openssl-cve-2026-63072/vuln.c"
fixed = "openssl-cve-2026-63072/fixed.c"
relpath = "crypto/cms/cms_kari.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-119"
class = "buffer overflow"
path = "crypto/cms/cms_kari.c"
function = "cms_kek_cipher"
mechanism = "unchecked_length_copy"
sink = "memcpy"
evidence = "Fix heap buffer overflow (8-byte OOB write) in AES-WRAP-PAD unwrap"
[[pair]]
name = "openssl-cve-2026-63072-cms_kek_cipher"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2026-63072"
cwe = "CWE-119"
commit = "2a3dac874c8057c1f0186849bf1ede1ae7b6b756"
parent = "1951c3cbd9d5101e027a1eb126f26c3c758f6cc0"
commit_url = "https://github.com/openssl/openssl/commit/2a3dac874c8057c1f0186849bf1ede1ae7b6b756"
vuln = "openssl-cve-2026-63072-cms_kek_cipher/vuln.c"
fixed = "openssl-cve-2026-63072-cms_kek_cipher/fixed.c"
relpath = "crypto/cms/cms_kemri.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-119"
class = "buffer overflow"
path = "crypto/cms/cms_kemri.c"
function = "cms_kek_cipher"
mechanism = "unchecked_length_copy"
sink = "memcpy"
evidence = "Fix heap buffer overflow (8-byte OOB write) in AES-WRAP-PAD unwrap"
[[pair]]
name = "openssl-cve-2026-63073"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2026-63073"
cwe = "CWE-119"
commit = "a7e5a6eea8fd3ccca6b6fbba031a5fbf8a3d93b4"
parent = "1e8c398db67404babd3e5af999bb6bd86f720c76"
commit_url = "https://github.com/openssl/openssl/commit/a7e5a6eea8fd3ccca6b6fbba031a5fbf8a3d93b4"
vuln = "openssl-cve-2026-63073/vuln.c"
fixed = "openssl-cve-2026-63073/fixed.c"
relpath = "crypto/cmp/cmp_vfy.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/cmp/cmp_vfy.c"
function = "ossl_cmp_msg_check_update"
mechanism = "other"
sink = "unknown"
evidence = "CMP unexpected sender DN used as format string in ERR_raise_data()"
[[pair]]
name = "openssl-cve-2026-14457"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2026-14457"
cwe = "CWE-119"
commit = "1e8c398db67404babd3e5af999bb6bd86f720c76"
parent = "f636f9ca0fa1bae5b42f9e787f025c96fb09c43a"
commit_url = "https://github.com/openssl/openssl/commit/1e8c398db67404babd3e5af999bb6bd86f720c76"
vuln = "openssl-cve-2026-14457/vuln.c"
fixed = "openssl-cve-2026-14457/fixed.c"
relpath = "ssl/t1_lib.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "ssl/t1_lib.c"
function = "check_cert_usable"
mechanism = "other"
sink = "unknown"
evidence = "Handle signature_algorithms_cert extension in key-only context"
[[pair]]
name = "openssl-cve-2026-63074"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2026-63074"
cwe = "CWE-119"
commit = "21a5d9658b0c66daace60e10ea18ff32a448de9f"
parent = "9f2b8522d39ff869fac2ff7c3f20609b54843188"
commit_url = "https://github.com/openssl/openssl/commit/21a5d9658b0c66daace60e10ea18ff32a448de9f"
vuln = "openssl-cve-2026-63074/vuln.c"
fixed = "openssl-cve-2026-63074/fixed.c"
relpath = "crypto/cmp/cmp_vfy.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/cmp/cmp_vfy.c"
function = "ossl_cmp_msg_check_update"
mechanism = "other"
sink = "unknown"
evidence = "Fix unbounded cert cache growth in cmp"
[[pair]]
name = "openssl-cve-2026-63075-txp_pkt_commit"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2026-63075"
cwe = "CWE-119"
commit = "c902e5f16d6a9e130e96d3ca6d8f64d71652e393"
parent = "a1f348ccb328c3afbd4ba6883f9b7c813c043259"
commit_url = "https://github.com/openssl/openssl/commit/c902e5f16d6a9e130e96d3ca6d8f64d71652e393"
vuln = "openssl-cve-2026-63075-txp_pkt_commit/vuln.c"
fixed = "openssl-cve-2026-63075-txp_pkt_commit/fixed.c"
relpath = "ssl/quic/quic_txp.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "ssl/quic/quic_txp.c"
function = "txp_pkt_commit"
mechanism = "other"
sink = "unknown"
evidence = "Don't store ACK-only frames in TX history for QUIC."
[[pair]]
name = "openssl-cve-2026-75803"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2026-75803"
cwe = "CWE-119"
commit = "119ab9555dc62275bbd71f6f49529b1a44feba42"
parent = "39488cb863074d5b8ece833905f7ad2b357d44fe"
commit_url = "https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42"
vuln = "openssl-cve-2026-75803/vuln.c"
fixed = "openssl-cve-2026-75803/fixed.c"
relpath = "providers/implementations/ciphers/cipher_aes_ocb.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "providers/implementations/ciphers/cipher_aes_ocb.c"
function = "aes_ocb_cipher"
mechanism = "other"
sink = "unknown"
evidence = "Check the tag on EVP_Cipher() finalize: Poly1305 and OCB AEADs"
[[pair]]
name = "openssl-cve-2026-75803-chacha20_poly1305_cipher"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2026-75803"
cwe = "CWE-119"
commit = "119ab9555dc62275bbd71f6f49529b1a44feba42"
parent = "39488cb863074d5b8ece833905f7ad2b357d44fe"
commit_url = "https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42"
vuln = "openssl-cve-2026-75803-chacha20_poly1305_cipher/vuln.c"
fixed = "openssl-cve-2026-75803-chacha20_poly1305_cipher/fixed.c"
relpath = "providers/implementations/ciphers/cipher_chacha20_poly1305.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "providers/implementations/ciphers/cipher_chacha20_poly1305.c"
function = "chacha20_poly1305_cipher"
mechanism = "other"
sink = "unknown"
evidence = "Check the tag on EVP_Cipher() finalize: Poly1305 and OCB AEADs"
[[pair]]
name = "openssl-cve-2026-75803-aes_gcm_siv_finish"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2026-75803"
cwe = "CWE-119"
commit = "bf95f5f772e9362f87b25cfa2f8cb15d984865b9"
parent = "de7d1871087fc1fa3e2c1db4b11275b68d72f416"
commit_url = "https://github.com/openssl/openssl/commit/bf95f5f772e9362f87b25cfa2f8cb15d984865b9"
vuln = "openssl-cve-2026-75803-aes_gcm_siv_finish/vuln.c"
fixed = "openssl-cve-2026-75803-aes_gcm_siv_finish/fixed.c"
relpath = "providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c"
function = "aes_gcm_siv_finish"
mechanism = "other"
sink = "unknown"
evidence = "Check the tag on EVP_Cipher() finalize: Poly1305 and OCB AEADs"
[[pair]]
name = "openssl-cve-2026-14456-port_default_packet_hand"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2026-14456"
cwe = "CWE-119"
commit = "08e7756c3900bcfd77a720e7b74e27d6e4ed01a9"
parent = "2dacccc943b47b8dc1ce8f7109c9852391b5a0d8"
commit_url = "https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9"
vuln = "openssl-cve-2026-14456-port_default_packet_hand/vuln.c"
fixed = "openssl-cve-2026-14456-port_default_packet_hand/fixed.c"
relpath = "ssl/quic/quic_port.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "ssl/quic/quic_port.c"
function = "port_default_packet_handler"
mechanism = "other"
sink = "unknown"
evidence = "QUIC server: limit number of pending QUIC channels/connections"
[[pair]]
name = "openssl-cve-2026-14456-expect_quic_for_value"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2026-14456"
cwe = "CWE-119"
commit = "9416706d408bb84deb7cee4647bff3045d2dc7ba"
parent = "2c9a078b6030444ed868a3943991f42b35cd49dc"
commit_url = "https://github.com/openssl/openssl/commit/9416706d408bb84deb7cee4647bff3045d2dc7ba"
vuln = "openssl-cve-2026-14456-expect_quic_for_value/vuln.c"
fixed = "openssl-cve-2026-14456-expect_quic_for_value/fixed.c"
relpath = "ssl/quic/quic_impl.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "ssl/quic/quic_impl.c"
function = "expect_quic_for_value"
mechanism = "other"
sink = "unknown"
evidence = "QUIC server: limit number of pending QUIC channels/connections"
[[pair]]
name = "openssl-cve-2026-45447"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2026-45447"
cwe = "CWE-416"
commit = "f4129fbe3cde786d363510069fe297234f99be8f"
parent = "609bcb24866d64f1fc49d38b852edbb39057d721"
commit_url = "https://github.com/openssl/openssl/commit/f4129fbe3cde786d363510069fe297234f99be8f"
vuln = "openssl-cve-2026-45447/vuln.c"
fixed = "openssl-cve-2026-45447/fixed.c"
relpath = "crypto/pkcs7/pk7_smime.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-416"
class = "use after free"
path = "crypto/pkcs7/pk7_smime.c"
function = "PKCS7_verify"
mechanism = "uaf"
sink = "free"
evidence = "Fix possible use-after-free in OpenSSL PKCS7_verify()"
[[pair]]
name = "openssl-cve-2026-45446"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2026-45446"
cwe = "CWE-119"
commit = "609bcb24866d64f1fc49d38b852edbb39057d721"
parent = "f87f0b6a8e04bcdeb98afc82b0da06a2d537f399"
commit_url = "https://github.com/openssl/openssl/commit/609bcb24866d64f1fc49d38b852edbb39057d721"
vuln = "openssl-cve-2026-45446/vuln.c"
fixed = "openssl-cve-2026-45446/fixed.c"
relpath = "providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c"
function = "aes_gcm_siv_initkey"
mechanism = "other"
sink = "unknown"
evidence = "Fix handling of empty-ciphertext messages in AES-GCM-SIV and AES-SIV"
[[pair]]
name = "openssl-cve-2026-45446-aes_siv_set_ctx_params"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2026-45446"
cwe = "CWE-119"
commit = "609bcb24866d64f1fc49d38b852edbb39057d721"
parent = "f87f0b6a8e04bcdeb98afc82b0da06a2d537f399"
commit_url = "https://github.com/openssl/openssl/commit/609bcb24866d64f1fc49d38b852edbb39057d721"
vuln = "openssl-cve-2026-45446-aes_siv_set_ctx_params/vuln.c"
fixed = "openssl-cve-2026-45446-aes_siv_set_ctx_params/fixed.c"
relpath = "providers/implementations/ciphers/cipher_aes_siv.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "providers/implementations/ciphers/cipher_aes_siv.c"
function = "aes_siv_set_ctx_params"
mechanism = "other"
sink = "unknown"
evidence = "Fix handling of empty-ciphertext messages in AES-GCM-SIV and AES-SIV"
[[pair]]
name = "openssl-cve-2026-45445"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2026-45445"
cwe = "CWE-119"
commit = "f87f0b6a8e04bcdeb98afc82b0da06a2d537f399"
parent = "5f489043b662fed32fbf7eb7442c479568eb43fd"
commit_url = "https://github.com/openssl/openssl/commit/f87f0b6a8e04bcdeb98afc82b0da06a2d537f399"
vuln = "openssl-cve-2026-45445/vuln.c"
fixed = "openssl-cve-2026-45445/fixed.c"
relpath = "providers/implementations/ciphers/cipher_aes_ocb.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "providers/implementations/ciphers/cipher_aes_ocb.c"
function = "aes_ocb_cipher"
mechanism = "other"
sink = "unknown"
evidence = "Apply the buffered IV on the AES-OCB EVP_Cipher() path"
[[pair]]
name = "openssl-cve-2026-42771"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2026-42771"
cwe = "CWE-119"
commit = "b3a555a0a7aa0028887149f6f973af89a4937bea"
parent = "0f3fab2eccc7c3417093a8243dd15d95b6cb472d"
commit_url = "https://github.com/openssl/openssl/commit/b3a555a0a7aa0028887149f6f973af89a4937bea"
vuln = "openssl-cve-2026-42771/vuln.c"
fixed = "openssl-cve-2026-42771/fixed.c"
relpath = "crypto/x509/x509_vpm.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/x509/x509_vpm.c"
function = "validate_hostname_part"
mechanism = "other"
sink = "unknown"
evidence = "Fix length miscalculation in validate_email"
[[pair]]
name = "openssl-cve-2026-42769"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2026-42769"
cwe = "CWE-476"
commit = "c2765d53c2649b56bc1ca1bb799e42002953056a"
parent = "d5030cdf32d6cd27bd964a0cb7aed2b7cb713369"
commit_url = "https://github.com/openssl/openssl/commit/c2765d53c2649b56bc1ca1bb799e42002953056a"
vuln = "openssl-cve-2026-42769/vuln.c"
fixed = "openssl-cve-2026-42769/fixed.c"
relpath = "crypto/cmp/cmp_genm.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-476"
class = "null pointer dereference"
path = "crypto/cmp/cmp_genm.c"
function = "selfsigned_verify_cb"
mechanism = "null_deref_unguarded"
sink = "NULL"
evidence = "Use the correct issuer when validating rootCAKeyUpdate"
[[pair]]
name = "openssl-cve-2026-42768"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2026-42768"
cwe = "CWE-119"
commit = "d5030cdf32d6cd27bd964a0cb7aed2b7cb713369"
parent = "f04d65692dd8109be9f387ce2ddd9fb1ab612b6b"
commit_url = "https://github.com/openssl/openssl/commit/d5030cdf32d6cd27bd964a0cb7aed2b7cb713369"
vuln = "openssl-cve-2026-42768/vuln.c"
fixed = "openssl-cve-2026-42768/fixed.c"
relpath = "crypto/cms/cms_env.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/cms/cms_env.c"
function = "cms_RecipientInfo_ktri_decrypt"
mechanism = "other"
sink = "unknown"
evidence = "Enforce implicit rejection for CMS/PKCS#7 decryption"
[[pair]]
name = "openssl-cve-2026-42768-pkcs7_decrypt_rinfo"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2026-42768"
cwe = "CWE-119"
commit = "d5030cdf32d6cd27bd964a0cb7aed2b7cb713369"
parent = "f04d65692dd8109be9f387ce2ddd9fb1ab612b6b"
commit_url = "https://github.com/openssl/openssl/commit/d5030cdf32d6cd27bd964a0cb7aed2b7cb713369"
vuln = "openssl-cve-2026-42768-pkcs7_decrypt_rinfo/vuln.c"
fixed = "openssl-cve-2026-42768-pkcs7_decrypt_rinfo/fixed.c"
relpath = "crypto/pkcs7/pk7_doit.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/pkcs7/pk7_doit.c"
function = "pkcs7_decrypt_rinfo"
mechanism = "other"
sink = "unknown"
evidence = "Enforce implicit rejection for CMS/PKCS#7 decryption"
[[pair]]
name = "openssl-cve-2026-42766"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2026-42766"
cwe = "CWE-476"
commit = "74245170b5a64b234ac4af27c86a25ec251c8b2a"
parent = "a9af3442290e8a04706a3cd5f284ffd5b486e3f6"
commit_url = "https://github.com/openssl/openssl/commit/74245170b5a64b234ac4af27c86a25ec251c8b2a"
vuln = "openssl-cve-2026-42766/vuln.c"
fixed = "openssl-cve-2026-42766/fixed.c"
relpath = "crypto/cms/cms_pwri.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-476"
class = "null pointer dereference"
path = "crypto/cms/cms_pwri.c"
function = "ossl_cms_RecipientInfo_pwri_crypt"
mechanism = "null_deref_unguarded"
sink = "NULL"
evidence = "Fix potential NULL dereference processing CMS PasswordRecipientInfo"
[[pair]]
name = "openssl-cve-2026-42765"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2026-42765"
cwe = "CWE-476"
commit = "a9af3442290e8a04706a3cd5f284ffd5b486e3f6"
parent = "5097ec4dae239112498abb722e255ea60ef7ac48"
commit_url = "https://github.com/openssl/openssl/commit/a9af3442290e8a04706a3cd5f284ffd5b486e3f6"
vuln = "openssl-cve-2026-42765/vuln.c"
fixed = "openssl-cve-2026-42765/fixed.c"
relpath = "crypto/x509/x509_vfy.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-476"
class = "null pointer dereference"
path = "crypto/x509/x509_vfy.c"
function = "check_revocation"
mechanism = "null_deref_unguarded"
sink = "NULL"
evidence = "Fix NULL Dereference in Certificate Verification with OCSP Checking"
[[pair]]
name = "openssl-cve-2026-42764"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2026-42764"
cwe = "CWE-476"
commit = "5097ec4dae239112498abb722e255ea60ef7ac48"
parent = "58633b658fe74095c8cdde191e4ce1bf94f8c5f9"
commit_url = "https://github.com/openssl/openssl/commit/5097ec4dae239112498abb722e255ea60ef7ac48"
vuln = "openssl-cve-2026-42764/vuln.c"
fixed = "openssl-cve-2026-42764/fixed.c"
relpath = "ssl/quic/quic_port.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-476"
class = "null pointer dereference"
path = "ssl/quic/quic_port.c"
function = "port_default_packet_handler"
mechanism = "null_deref_unguarded"
sink = "NULL"
evidence = "Fix NULL dereference in QUIC address validation"
[[pair]]
name = "openssl-cve-2026-35188"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2026-35188"
cwe = "CWE-119"
commit = "58633b658fe74095c8cdde191e4ce1bf94f8c5f9"
parent = "68ef88913e321bdb47eee88118ceba18ed2388cd"
commit_url = "https://github.com/openssl/openssl/commit/58633b658fe74095c8cdde191e4ce1bf94f8c5f9"
vuln = "openssl-cve-2026-35188/vuln.c"
fixed = "openssl-cve-2026-35188/fixed.c"
relpath = "crypto/x509/x509_vfy.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/x509/x509_vfy.c"
function = "check_cert_ocsp_resp"
mechanism = "other"
sink = "unknown"
evidence = "Fix Double-free When Checking OCSP Stapled Response"
[[pair]]
name = "openssl-cve-2026-34181"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2026-34181"
cwe = "CWE-119"
commit = "5a0230b6cc95a576b0c2b7b5b2ba7c74232e7b7c"
parent = "fcb23806047f5afbe55d5d601a527fc24bf7ca2c"
commit_url = "https://github.com/openssl/openssl/commit/5a0230b6cc95a576b0c2b7b5b2ba7c74232e7b7c"
vuln = "openssl-cve-2026-34181/vuln.c"
fixed = "openssl-cve-2026-34181/fixed.c"
relpath = "crypto/pkcs12/p12_mutl.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/pkcs12/p12_mutl.c"
function = "PBMAC1_PBKDF2_HMAC"
mechanism = "other"
sink = "unknown"
evidence = "pkcs12: verify that the pbmac1 key length is safe"
[[pair]]
name = "openssl-cve-2026-9076"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2026-9076"
cwe = "CWE-119"
commit = "51d1800e95283a8beec85152e35e3634dab8dd82"
parent = "97f6b621f7af2c4c4e162c75045a6e12a8fdf8d9"
commit_url = "https://github.com/openssl/openssl/commit/51d1800e95283a8beec85152e35e3634dab8dd82"
vuln = "openssl-cve-2026-9076/vuln.c"
fixed = "openssl-cve-2026-9076/fixed.c"
relpath = "crypto/cms/cms_pwri.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-119"
class = "buffer overflow"
path = "crypto/cms/cms_pwri.c"
function = "kek_unwrap_key"
mechanism = "unchecked_length_copy"
sink = "memcpy"
evidence = "cms: kek_unwrap_key: Fix out-of-bounds read in check-byte validation"
[[pair]]
name = "openssl-cve-2026-7383"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2026-7383"
cwe = "CWE-119"
commit = "97f6b621f7af2c4c4e162c75045a6e12a8fdf8d9"
parent = "cb005ceaaf1fb50722e0101762a3e266338c5bf9"
commit_url = "https://github.com/openssl/openssl/commit/97f6b621f7af2c4c4e162c75045a6e12a8fdf8d9"
vuln = "openssl-cve-2026-7383/vuln.c"
fixed = "openssl-cve-2026-7383/fixed.c"
relpath = "crypto/asn1/a_mbstr.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/asn1/a_mbstr.c"
function = "ASN1_mbstring_ncopy"
mechanism = "other"
sink = "unknown"
evidence = "Reject oversized inputs in ASN1_mbstring_ncopy()"
[[pair]]
name = "openssl-cve-2026-31790"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2026-31790"
cwe = "CWE-119"
commit = "eed200f58cd8645ed77e46b7e9f764e284df379e"
parent = "a91e537d16d74050dbde50bb0dfb1fe9930f0521"
commit_url = "https://github.com/openssl/openssl/commit/eed200f58cd8645ed77e46b7e9f764e284df379e"
vuln = "openssl-cve-2026-31790/vuln.c"
fixed = "openssl-cve-2026-31790/fixed.c"
relpath = "providers/implementations/kem/rsa_kem.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "providers/implementations/kem/rsa_kem.c"
function = "rsasve_generate"
mechanism = "other"
sink = "unknown"
evidence = "rsa_kem: validate RSA_public_encrypt() result in RSASVE"
[[pair]]
name = "openssl-cve-2026-31790-rsasve_generate"
slice = "vfc"
language = "unknown"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2026-31790"
cwe = "CWE-119"
commit = "abd8b2eec7e3f3fda60ecfb68498b246b52af482"
parent = "a24216018e1ede8ff01a4ff5afff7dfbd443e2f9"
commit_url = "https://github.com/openssl/openssl/commit/abd8b2eec7e3f3fda60ecfb68498b246b52af482"
vuln = "openssl-cve-2026-31790-rsasve_generate/vuln.in"
fixed = "openssl-cve-2026-31790-rsasve_generate/fixed.in"
relpath = "providers/implementations/kem/rsa_kem.c.in"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "providers/implementations/kem/rsa_kem.c.in"
function = "rsasve_generate"
mechanism = "other"
sink = "unknown"
evidence = "rsa_kem: validate RSA_public_encrypt() result in RSASVE"
[[pair]]
name = "openssl-cve-2026-31789"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2026-31789"
cwe = "CWE-119"
commit = "a91e537d16d74050dbde50bb0dfb1fe9930f0521"
parent = "b7ae7a093997b5cd549bc21cccd715510fef86c0"
commit_url = "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521"
vuln = "openssl-cve-2026-31789/vuln.c"
fixed = "openssl-cve-2026-31789/fixed.c"
relpath = "crypto/o_str.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-119"
class = "buffer overflow"
path = "crypto/o_str.c"
function = "buf2hexstr_sep"
mechanism = "unchecked_length_copy"
sink = "memcpy"
evidence = "Avoid possible buffer overflow in buf2hex conversion"
[[pair]]
name = "openssl-cve-2026-28388"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2026-28388"
cwe = "CWE-476"
commit = "59c3b3158553ab53275bbbccca5cb305d591cf2e"
parent = "d044f9252fe9a54001986fb4eb4e32076a056527"
commit_url = "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e"
vuln = "openssl-cve-2026-28388/vuln.c"
fixed = "openssl-cve-2026-28388/fixed.c"
relpath = "crypto/x509/x509_vfy.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-476"
class = "null pointer dereference"
path = "crypto/x509/x509_vfy.c"
function = "check_delta_base"
mechanism = "null_deref_unguarded"
sink = "NULL"
evidence = "Fix NULL Dereference When Delta CRL Lacks CRL Number Extension"
[[pair]]
name = "openssl-cve-2026-28389"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2026-28389"
cwe = "CWE-476"
commit = "af2a5fecd3e71a29e7568f9c1453dec5cebbaff4"
parent = "6e74b1275cbc1fd1cf7ba32f662602d68501f6ca"
commit_url = "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4"
vuln = "openssl-cve-2026-28389/vuln.c"
fixed = "openssl-cve-2026-28389/fixed.c"
relpath = "crypto/cms/cms_rsa.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-476"
class = "null pointer dereference"
path = "crypto/cms/cms_rsa.c"
function = "rsa_cms_decrypt"
mechanism = "null_deref_unguarded"
sink = "NULL"
evidence = "Fix NULL deref in rsa_cms_decrypt"
[[pair]]
name = "openssl-cve-2026-28389-dh_cms_set_shared_info"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2026-28389"
cwe = "CWE-476"
commit = "7b5274e812400cacb6f3be4c2df5340923fa807f"
parent = "72ec3e38c87f71f5c50ae3b16cc34d8371c71bb9"
commit_url = "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f"
vuln = "openssl-cve-2026-28389-dh_cms_set_shared_info/vuln.c"
fixed = "openssl-cve-2026-28389-dh_cms_set_shared_info/fixed.c"
relpath = "crypto/cms/cms_dh.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-476"
class = "null pointer dereference"
path = "crypto/cms/cms_dh.c"
function = "dh_cms_set_shared_info"
mechanism = "null_deref_unguarded"
sink = "NULL"
evidence = "Fix NULL deref in [ec]dh_cms_set_shared_info"
[[pair]]
name = "openssl-cve-2026-28389-ecdh_cms_set_shared_info"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2026-28389"
cwe = "CWE-476"
commit = "7b5274e812400cacb6f3be4c2df5340923fa807f"
parent = "72ec3e38c87f71f5c50ae3b16cc34d8371c71bb9"
commit_url = "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f"
vuln = "openssl-cve-2026-28389-ecdh_cms_set_shared_info/vuln.c"
fixed = "openssl-cve-2026-28389-ecdh_cms_set_shared_info/fixed.c"
relpath = "crypto/cms/cms_ec.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-476"
class = "null pointer dereference"
path = "crypto/cms/cms_ec.c"
function = "ecdh_cms_set_shared_info"
mechanism = "null_deref_unguarded"
sink = "NULL"
evidence = "Fix NULL deref in [ec]dh_cms_set_shared_info"
[[pair]]
name = "openssl-cve-2026-2673"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2026-2673"
cwe = "CWE-119"
commit = "85977e013f32ceb96aa034c0e741adddc1a05e34"
parent = "21d525dc846aed171fc886f3da614a6645948f13"
commit_url = "https://github.com/openssl/openssl/commit/85977e013f32ceb96aa034c0e741adddc1a05e34"
vuln = "openssl-cve-2026-2673/vuln.c"
fixed = "openssl-cve-2026-2673/fixed.c"
relpath = "ssl/t1_lib.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "ssl/t1_lib.c"
function = "gid_cb"
mechanism = "other"
sink = "unknown"
evidence = "Fix group tuple handling in DEFAULT expansion"
[[pair]]
name = "openssl-cve-2025-69419"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2025-69419"
cwe = "CWE-119"
commit = "4191043c36f1a50c717a2d0075fc6f3b9bc0afc5"
parent = "7565bb46fa2979511cb27aad1c2bd6b80adf7352"
commit_url = "https://github.com/openssl/openssl/commit/4191043c36f1a50c717a2d0075fc6f3b9bc0afc5"
vuln = "openssl-cve-2025-69419/vuln.c"
fixed = "openssl-cve-2025-69419/fixed.c"
relpath = "crypto/pkcs12/p12_utl.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2025"
[[pair.expected]]
cwe = "CWE-119"
class = "buffer overflow"
path = "crypto/pkcs12/p12_utl.c"
function = "bmp_to_utf8"
mechanism = "unchecked_length_copy"
sink = "memcpy"
evidence = "Alternate fix for CVE-2025-69419"
[[pair]]
name = "openssl-cve-2025-69418"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2025-69418"
cwe = "CWE-119"
commit = "52d23c86a54adab5ee9f80e48b242b52c4cc2347"
parent = "475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6"
commit_url = "https://github.com/openssl/openssl/commit/52d23c86a54adab5ee9f80e48b242b52c4cc2347"
vuln = "openssl-cve-2025-69418/vuln.c"
fixed = "openssl-cve-2025-69418/fixed.c"
relpath = "crypto/modes/ocb128.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2025"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/modes/ocb128.c"
function = "CRYPTO_ocb128_encrypt"
mechanism = "other"
sink = "unknown"
evidence = "Fix OCB AES-NI/HW stream path unauthenticated/unencrypted trailing bytes"
[[pair]]
name = "openssl-cve-2025-66199-tls13_process_compressed"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2025-66199"
cwe = "CWE-119"
commit = "3ed1f75249932b155eef993a8e66a99cb98bfef4"
parent = "384011202af92605d926fafe4a0bcd6b65d162ad"
commit_url = "https://github.com/openssl/openssl/commit/3ed1f75249932b155eef993a8e66a99cb98bfef4"
vuln = "openssl-cve-2025-66199-tls13_process_compressed/vuln.c"
fixed = "openssl-cve-2025-66199-tls13_process_compressed/fixed.c"
relpath = "ssl/statem/statem_lib.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2025"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "ssl/statem/statem_lib.c"
function = "tls13_process_compressed_certificate"
mechanism = "other"
sink = "unknown"
evidence = "Check the received uncompressed certificate length to prevent excessive pre-decompression allocation."
[[pair]]
name = "openssl-cve-2025-68160"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2025-68160"
cwe = "CWE-119"
commit = "475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6"
parent = "e0666f72294691a808443970b654412a6d92fa0f"
commit_url = "https://github.com/openssl/openssl/commit/475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6"
vuln = "openssl-cve-2025-68160/vuln.c"
fixed = "openssl-cve-2025-68160/fixed.c"
relpath = "crypto/bio/bf_lbuf.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2025"
[[pair.expected]]
cwe = "CWE-119"
class = "buffer overflow"
path = "crypto/bio/bf_lbuf.c"
function = "linebuffer_write"
mechanism = "unchecked_length_copy"
sink = "memcpy"
evidence = "Fix heap buffer overflow in BIO_f_linebuffer"
[[pair]]
name = "openssl-cve-2025-15469"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2025-15469"
cwe = "CWE-119"
commit = "a7936fa4bd23c906e1955a16a0a0ab39a4953a61"
parent = "1f08e54bad32843044fe8a675948d65e3b4ece65"
commit_url = "https://github.com/openssl/openssl/commit/a7936fa4bd23c906e1955a16a0a0ab39a4953a61"
vuln = "openssl-cve-2025-15469/vuln.c"
fixed = "openssl-cve-2025-15469/fixed.c"
relpath = "apps/dgst.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2025"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "apps/dgst.c"
function = "do_fp_oneshot_sign"
mechanism = "other"
sink = "unknown"
evidence = "Report truncation in oneshot `openssl dgst -sign`"
[[pair]]
name = "openssl-cve-2025-15467"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2025-15467"
cwe = "CWE-119"
commit = "ce39170276daec87f55c39dad1f629b56344429e"
parent = "3250efdfe99d2d7fe4fb05231add7fba864b7653"
commit_url = "https://github.com/openssl/openssl/commit/ce39170276daec87f55c39dad1f629b56344429e"
vuln = "openssl-cve-2025-15467/vuln.c"
fixed = "openssl-cve-2025-15467/fixed.c"
relpath = "crypto/evp/evp_lib.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2025"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/evp/evp_lib.c"
function = "evp_cipher_get_asn1_aead_params"
mechanism = "other"
sink = "unknown"
evidence = "Correct handling of AEAD-encrypted CMS with inadmissibly long IV"
[[pair]]
name = "openssl-cve-2025-11187"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2025-11187"
cwe = "CWE-119"
commit = "205e3a55e16e4bd08c12fdbd3416ab829c0f6206"
parent = "b8654779e3b3b4eb0bda7623c0891d394e068187"
commit_url = "https://github.com/openssl/openssl/commit/205e3a55e16e4bd08c12fdbd3416ab829c0f6206"
vuln = "openssl-cve-2025-11187/vuln.c"
fixed = "openssl-cve-2025-11187/fixed.c"
relpath = "crypto/pkcs12/p12_mutl.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2025"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/pkcs12/p12_mutl.c"
function = "PBMAC1_PBKDF2_HMAC"
mechanism = "other"
sink = "unknown"
evidence = "pkcs12: Validate salt and keylength in PBMAC1"
[[pair]]
name = "openssl-cve-2025-9232"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2025-9232"
cwe = "CWE-119"
commit = "654dc11d23468a74fc8ea4672b702dd3feb7be4b"
parent = "a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def"
commit_url = "https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b"
vuln = "openssl-cve-2025-9232/vuln.c"
fixed = "openssl-cve-2025-9232/fixed.c"
relpath = "crypto/http/http_lib.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2025"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/http/http_lib.c"
function = "use_proxy"
mechanism = "other"
sink = "unknown"
evidence = "use_proxy(): Add missing terminating NUL byte"
[[pair]]
name = "openssl-cve-2025-9230"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2025-9230"
cwe = "CWE-119"
commit = "a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def"
parent = "7e0fc054a08706d194d3355aba4a06003cadfb29"
commit_url = "https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def"
vuln = "openssl-cve-2025-9230/vuln.c"
fixed = "openssl-cve-2025-9230/fixed.c"
relpath = "crypto/cms/cms_pwri.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2025"
[[pair.expected]]
cwe = "CWE-119"
class = "buffer overflow"
path = "crypto/cms/cms_pwri.c"
function = "kek_unwrap_key"
mechanism = "unchecked_length_copy"
sink = "memcpy"
evidence = "kek_unwrap_key(): Fix incorrect check of unwrapped key size"
[[pair]]
name = "openssl-cve-2024-12797"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2024-12797"
cwe = "CWE-119"
commit = "798779d43494549b611233f92652f0da5328fbe7"
parent = "0db27ec7f8abd258d2e8849ac555ca26ba0cd8d6"
commit_url = "https://github.com/openssl/openssl/commit/798779d43494549b611233f92652f0da5328fbe7"
vuln = "openssl-cve-2024-12797/vuln.c"
fixed = "openssl-cve-2024-12797/fixed.c"
relpath = "ssl/statem/statem_clnt.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2024"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "ssl/statem/statem_clnt.c"
function = "tls_post_process_server_rpk"
mechanism = "other"
sink = "unknown"
evidence = "With SSL_VERIFY_PEER client RPK should abort on X509 error"
[[pair]]
name = "openssl-cve-2024-13176-ec_field_inverse_mod_ord"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2024-13176"
cwe = "CWE-119"
commit = "07272b05b04836a762b4baa874958af51d513844"
parent = "643de602771f6b38ad7823e26d5a63c669eb185b"
commit_url = "https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844"
vuln = "openssl-cve-2024-13176-ec_field_inverse_mod_ord/vuln.c"
fixed = "openssl-cve-2024-13176-ec_field_inverse_mod_ord/fixed.c"
relpath = "crypto/ec/ec_lib.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2024"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/ec/ec_lib.c"
function = "ec_field_inverse_mod_ord"
mechanism = "other"
sink = "unknown"
evidence = "Fix timing side-channel in ECDSA signature computation"
[[pair]]
name = "openssl-cve-2024-6119"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2024-6119"
cwe = "CWE-119"
commit = "06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6"
parent = "9aae56395aa8e77c44a9df83fd395a644d016635"
commit_url = "https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6"
vuln = "openssl-cve-2024-6119/vuln.c"
fixed = "openssl-cve-2024-6119/fixed.c"
relpath = "crypto/x509/v3_utl.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2024"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/x509/v3_utl.c"
function = "do_x509_check"
mechanism = "other"
sink = "unknown"
evidence = "Avoid type errors in EAI-related name check logic."
[[pair]]
name = "openssl-cve-2024-5535"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2024-5535"
cwe = "CWE-119"
commit = "4b375b998798dd516d367036773073e1b88e6433"
parent = "189a7ed3e380e34ea38fe4190a7c9396bace0fb7"
commit_url = "https://github.com/openssl/openssl/commit/4b375b998798dd516d367036773073e1b88e6433"
vuln = "openssl-cve-2024-5535/vuln.c"
fixed = "openssl-cve-2024-5535/fixed.c"
relpath = "ssl/statem/extensions_clnt.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2024"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "ssl/statem/extensions_clnt.c"
function = "tls_parse_stoc_alpn"
mechanism = "other"
sink = "unknown"
evidence = "Add ALPN validation in the client"
[[pair]]
name = "openssl-cve-2024-5535-tls_construct_stoc_next_"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2024-5535"
cwe = "CWE-119"
commit = "189a7ed3e380e34ea38fe4190a7c9396bace0fb7"
parent = "72394c9a1a6a6b07edf43eb2ad7e95e1093ada1b"
commit_url = "https://github.com/openssl/openssl/commit/189a7ed3e380e34ea38fe4190a7c9396bace0fb7"
vuln = "openssl-cve-2024-5535-tls_construct_stoc_next_/vuln.c"
fixed = "openssl-cve-2024-5535-tls_construct_stoc_next_/fixed.c"
relpath = "ssl/statem/extensions_srvr.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2024"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "ssl/statem/extensions_srvr.c"
function = "tls_construct_stoc_next_proto_neg"
mechanism = "other"
sink = "unknown"
evidence = "Correct return values for tls_construct_stoc_next_proto_neg"
[[pair]]
name = "openssl-cve-2024-5535-tls_parse_stoc_npn"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2024-5535"
cwe = "CWE-119"
commit = "159921152fd4aa91e4c849fd281ad93ac0d0d0ba"
parent = "cf6f91f6121f4db167405db2f0de410a456f260c"
commit_url = "https://github.com/openssl/openssl/commit/159921152fd4aa91e4c849fd281ad93ac0d0d0ba"
vuln = "openssl-cve-2024-5535-tls_parse_stoc_npn/vuln.c"
fixed = "openssl-cve-2024-5535-tls_parse_stoc_npn/fixed.c"
relpath = "ssl/statem/extensions_clnt.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2024"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "ssl/statem/extensions_clnt.c"
function = "tls_parse_stoc_npn"
mechanism = "other"
sink = "unknown"
evidence = "More correctly handle a selected_len of 0 when processing NPN"
[[pair]]
name = "openssl-cve-2024-5535-ssl_select_next_proto"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2024-5535"
cwe = "CWE-119"
commit = "cf6f91f6121f4db167405db2f0de410a456f260c"
parent = "a6facb1042adda2394dc5c98fbceb7625eef141a"
commit_url = "https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c"
vuln = "openssl-cve-2024-5535-ssl_select_next_proto/vuln.c"
fixed = "openssl-cve-2024-5535-ssl_select_next_proto/fixed.c"
relpath = "ssl/ssl_lib.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2024"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "ssl/ssl_lib.c"
function = "SSL_select_next_proto"
mechanism = "other"
sink = "unknown"
evidence = "Fix SSL_select_next_proto"
[[pair]]
name = "openssl-cve-2024-5535-alpn_select_cb"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2024-5535"
cwe = "CWE-119"
commit = "6cc511826f09e513b4ec066d9b95acaf4f86d991"
parent = "015255851371757d54c2560643eb3b3a88123cf1"
commit_url = "https://github.com/openssl/openssl/commit/6cc511826f09e513b4ec066d9b95acaf4f86d991"
vuln = "openssl-cve-2024-5535-alpn_select_cb/vuln.c"
fixed = "openssl-cve-2024-5535-alpn_select_cb/fixed.c"
relpath = "ssl/quic/quic_tserver.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2024"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "ssl/quic/quic_tserver.c"
function = "alpn_select_cb"
mechanism = "other"
sink = "unknown"
evidence = "Use correctly formatted ALPN data in tserver"
[[pair]]
name = "openssl-cve-2024-4741"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2024-4741"
cwe = "CWE-416"
commit = "2d05959073c4bf8803401668b9df85931a08e020"
parent = "b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d"
commit_url = "https://github.com/openssl/openssl/commit/2d05959073c4bf8803401668b9df85931a08e020"
vuln = "openssl-cve-2024-4741/vuln.c"
fixed = "openssl-cve-2024-4741/fixed.c"
relpath = "ssl/record/rec_layer_s3.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2024"
[[pair.expected]]
cwe = "CWE-416"
class = "use after free"
path = "ssl/record/rec_layer_s3.c"
function = "ssl3_read_n"
mechanism = "uaf"
sink = "free"
evidence = "Set rlayer.packet to NULL after we've finished using it"
[[pair]]
name = "openssl-cve-2024-4741-ssl3_release_read_buffer"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2024-4741"
cwe = "CWE-416"
commit = "2d05959073c4bf8803401668b9df85931a08e020"
parent = "b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d"
commit_url = "https://github.com/openssl/openssl/commit/2d05959073c4bf8803401668b9df85931a08e020"
vuln = "openssl-cve-2024-4741-ssl3_release_read_buffer/vuln.c"
fixed = "openssl-cve-2024-4741-ssl3_release_read_buffer/fixed.c"
relpath = "ssl/record/ssl3_buffer.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2024"
[[pair.expected]]
cwe = "CWE-416"
class = "use after free"
path = "ssl/record/ssl3_buffer.c"
function = "ssl3_release_read_buffer"
mechanism = "uaf"
sink = "free"
evidence = "Set rlayer.packet to NULL after we've finished using it"
[[pair]]
name = "openssl-cve-2024-4741-ssl_free_buffers"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2024-4741"
cwe = "CWE-119"
commit = "b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d"
parent = "ec559c2a6cca3fd4cedae5c47f2dfa38e5e24865"
commit_url = "https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d"
vuln = "openssl-cve-2024-4741-ssl_free_buffers/vuln.c"
fixed = "openssl-cve-2024-4741-ssl_free_buffers/fixed.c"
relpath = "ssl/ssl_lib.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2024"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "ssl/ssl_lib.c"
function = "SSL_free_buffers"
mechanism = "other"
sink = "unknown"
evidence = "Only free the read buffers if we're not using them"
[[pair]]
name = "openssl-cve-2024-4741-tls_release_read_buffer"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2024-4741"
cwe = "CWE-416"
commit = "10171e5b511b700c5ecd4fd3e1086b19c34b1ae3"
parent = "c88c3de51020c37e8706bf7a682a162593053aac"
commit_url = "https://github.com/openssl/openssl/commit/10171e5b511b700c5ecd4fd3e1086b19c34b1ae3"
vuln = "openssl-cve-2024-4741-tls_release_read_buffer/vuln.c"
fixed = "openssl-cve-2024-4741-tls_release_read_buffer/fixed.c"
relpath = "ssl/record/methods/tls_common.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2024"
[[pair.expected]]
cwe = "CWE-416"
class = "use after free"
path = "ssl/record/methods/tls_common.c"
function = "tls_release_read_buffer"
mechanism = "uaf"
sink = "free"
evidence = "Set rl->packet to NULL after we've finished using it"
[[pair]]
name = "openssl-cve-2024-4741-tls_free_buffers"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2024-4741"
cwe = "CWE-119"
commit = "c88c3de51020c37e8706bf7a682a162593053aac"
parent = "17765d9cefed8b4ada6548719beb98e22672a9bd"
commit_url = "https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac"
vuln = "openssl-cve-2024-4741-tls_free_buffers/vuln.c"
fixed = "openssl-cve-2024-4741-tls_free_buffers/fixed.c"
relpath = "ssl/record/methods/tls_common.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2024"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "ssl/record/methods/tls_common.c"
function = "tls_free_buffers"
mechanism = "other"
sink = "unknown"
evidence = "Only free the read buffers if we're not using them"
[[pair]]
name = "openssl-cve-2024-4603"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2024-4603"
cwe = "CWE-119"
commit = "3559e868e58005d15c6013a0c1fd832e51c73397"
parent = "d4b119c567cb5dcaf83add7ca2ea1d646eb3ef9f"
commit_url = "https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397"
vuln = "openssl-cve-2024-4603/vuln.c"
fixed = "openssl-cve-2024-4603/fixed.c"
relpath = "crypto/dsa/dsa_check.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2024"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/dsa/dsa_check.c"
function = "ossl_dsa_check_params"
mechanism = "other"
sink = "unknown"
evidence = "Check DSA parameters for excessive sizes before validating"
[[pair]]
name = "openssl-cve-2024-2511"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2024-2511"
cwe = "CWE-119"
commit = "b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d"
parent = "c1e462ee4bd61867ee391fc13110ca41e4889535"
commit_url = "https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d"
vuln = "openssl-cve-2024-2511/vuln.c"
fixed = "openssl-cve-2024-2511/fixed.c"
relpath = "ssl/ssl_lib.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2024"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "ssl/ssl_lib.c"
function = "ssl_update_cache"
mechanism = "other"
sink = "unknown"
evidence = "Fix unconstrained session cache growth in TLSv1.3"
[[pair]]
name = "openssl-cve-2024-2511-tls_construct_server_hel"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2024-2511"
cwe = "CWE-119"
commit = "b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d"
parent = "c1e462ee4bd61867ee391fc13110ca41e4889535"
commit_url = "https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d"
vuln = "openssl-cve-2024-2511-tls_construct_server_hel/vuln.c"
fixed = "openssl-cve-2024-2511-tls_construct_server_hel/fixed.c"
relpath = "ssl/statem/statem_srvr.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2024"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "ssl/statem/statem_srvr.c"
function = "tls_construct_server_hello"
mechanism = "other"
sink = "unknown"
evidence = "Fix unconstrained session cache growth in TLSv1.3"
[[pair]]
name = "openssl-cve-2024-0727"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2024-0727"
cwe = "CWE-476"
commit = "09df4395b5071217b76dc7d3d2e630eb8c5a79c2"
parent = "6c70934a46eaa1734c2efbe9d7baac51c607062e"
commit_url = "https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2"
vuln = "openssl-cve-2024-0727/vuln.c"
fixed = "openssl-cve-2024-0727/fixed.c"
relpath = "crypto/pkcs12/p12_mutl.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2024"
[[pair.expected]]
cwe = "CWE-476"
class = "null pointer dereference"
path = "crypto/pkcs12/p12_mutl.c"
function = "pkcs12_gen_mac"
mechanism = "null_deref_unguarded"
sink = "NULL"
evidence = "Add NULL checks where ContentInfo data can be NULL"
[[pair]]
name = "openssl-cve-2024-0727-smime_write_pkcs7"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2024-0727"
cwe = "CWE-476"
commit = "09df4395b5071217b76dc7d3d2e630eb8c5a79c2"
parent = "6c70934a46eaa1734c2efbe9d7baac51c607062e"
commit_url = "https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2"
vuln = "openssl-cve-2024-0727-smime_write_pkcs7/vuln.c"
fixed = "openssl-cve-2024-0727-smime_write_pkcs7/fixed.c"
relpath = "crypto/pkcs7/pk7_mime.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2024"
[[pair.expected]]
cwe = "CWE-476"
class = "null pointer dereference"
path = "crypto/pkcs7/pk7_mime.c"
function = "SMIME_write_PKCS7"
mechanism = "null_deref_unguarded"
sink = "NULL"
evidence = "Add NULL checks where ContentInfo data can be NULL"
[[pair]]
name = "openssl-cve-2023-5363"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2023-5363"
cwe = "CWE-119"
commit = "0df40630850fb2740e6be6890bb905d3fc623b2d"
parent = "23d21359e35536a4ee8f7be0b245ddbfac909bff"
commit_url = "https://github.com/openssl/openssl/commit/0df40630850fb2740e6be6890bb905d3fc623b2d"
vuln = "openssl-cve-2023-5363/vuln.c"
fixed = "openssl-cve-2023-5363/fixed.c"
relpath = "crypto/evp/evp_enc.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2023"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/evp/evp_enc.c"
function = "evp_cipher_init_internal"
mechanism = "other"
sink = "unknown"
evidence = "evp: process key length and iv length early if present"
[[pair]]
name = "openssl-cve-2023-3817-dh_check"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2023-3817"
cwe = "CWE-119"
commit = "9002fd07327a91f35ba6c1307e71fa6fd4409b7f"
parent = "e648db50d9a63f71cab5cb78424c2932d019a744"
commit_url = "https://github.com/openssl/openssl/commit/9002fd07327a91f35ba6c1307e71fa6fd4409b7f"
vuln = "openssl-cve-2023-3817-dh_check/vuln.c"
fixed = "openssl-cve-2023-3817-dh_check/fixed.c"
relpath = "crypto/dh/dh_check.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2023"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/dh/dh_check.c"
function = "DH_check"
mechanism = "other"
sink = "unknown"
evidence = "DH_check(): Do not try checking q properties if it is obviously invalid"
[[pair]]
name = "openssl-cve-2023-3446"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2023-3446"
cwe = "CWE-119"
commit = "8780a896543a654e757db1b9396383f9d8095528"
parent = "fe824ce0c5d51e7e7cf36c31db6c49c1c0c04a25"
commit_url = "https://github.com/openssl/openssl/commit/8780a896543a654e757db1b9396383f9d8095528"
vuln = "openssl-cve-2023-3446/vuln.c"
fixed = "openssl-cve-2023-3446/fixed.c"
relpath = "crypto/dh/dh_check.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2023"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/dh/dh_check.c"
function = "DH_check"
mechanism = "other"
sink = "unknown"
evidence = "Fix DH_check() excessive time with over sized modulus"
[[pair]]
name = "openssl-cve-2023-2975"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2023-2975"
cwe = "CWE-119"
commit = "00e2f5eea29994d19293ec4e8c8775ba73678598"
parent = "175fa8469fc78f6cf35dfb87d26899e60e9ff1d4"
commit_url = "https://github.com/openssl/openssl/commit/00e2f5eea29994d19293ec4e8c8775ba73678598"
vuln = "openssl-cve-2023-2975/vuln.c"
fixed = "openssl-cve-2023-2975/fixed.c"
relpath = "providers/implementations/ciphers/cipher_aes_siv.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2023"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "providers/implementations/ciphers/cipher_aes_siv.c"
function = "siv_cipher"
mechanism = "other"
sink = "unknown"
evidence = "Do not ignore empty associated data with AES-SIV mode"
[[pair]]
name = "openssl-cve-2023-2650"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2023-2650"
cwe = "CWE-119"
commit = "d63b3e7959e79f98d60760a739f7876dc5adc838"
parent = "3ca28c9e81fae36b0b44dc39beecd2b5a7561975"
commit_url = "https://github.com/openssl/openssl/commit/d63b3e7959e79f98d60760a739f7876dc5adc838"
vuln = "openssl-cve-2023-2650/vuln.c"
fixed = "openssl-cve-2023-2650/fixed.c"
relpath = "crypto/objects/obj_dat.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2023"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/objects/obj_dat.c"
function = "OBJ_obj2txt"
mechanism = "other"
sink = "unknown"
evidence = "Restrict the size of OBJECT IDENTIFIERs that OBJ_obj2txt will translate"
[[pair]]
name = "openssl-cve-2022-37454"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2022-37454"
cwe = "CWE-119"
commit = "d12cde7fc5561d463badcd8a73079cf92864c31e"
parent = "5d6f13d90d5c4212737002bcd54871cf236a1220"
commit_url = "https://github.com/openssl/openssl/commit/d12cde7fc5561d463badcd8a73079cf92864c31e"
vuln = "openssl-cve-2022-37454/vuln.c"
fixed = "openssl-cve-2022-37454/fixed.c"
relpath = "providers/implementations/kdfs/hkdf.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2022"
[[pair.expected]]
cwe = "CWE-119"
class = "buffer overflow"
path = "providers/implementations/kdfs/hkdf.c"
function = "HKDF_Expand"
mechanism = "unchecked_length_copy"
sink = "memcpy"
evidence = "Update hkdf.c to avoid potentially vulnerable code pattern"
[[pair]]
name = "openssl-cve-2022-4304"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2022-4304"
cwe = "CWE-119"
commit = "a00d757d9ca212994625d1a02c81cc5edd27e13b"
parent = "908eaceb62624f5b5c505b286d904bd3a4e8a64a"
commit_url = "https://github.com/openssl/openssl/commit/a00d757d9ca212994625d1a02c81cc5edd27e13b"
vuln = "openssl-cve-2022-4304/vuln.c"
fixed = "openssl-cve-2022-4304/fixed.c"
relpath = "crypto/bn/bn_asm.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2022"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/bn/bn_asm.c"
function = "bn_sub_words"
mechanism = "other"
sink = "unknown"
evidence = "Alternative fix for CVE-2022-4304"
[[pair]]
name = "openssl-cve-2022-4304-bn_blinding_invert_ex"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2022-4304"
cwe = "CWE-119"
commit = "a00d757d9ca212994625d1a02c81cc5edd27e13b"
parent = "908eaceb62624f5b5c505b286d904bd3a4e8a64a"
commit_url = "https://github.com/openssl/openssl/commit/a00d757d9ca212994625d1a02c81cc5edd27e13b"
vuln = "openssl-cve-2022-4304-bn_blinding_invert_ex/vuln.c"
fixed = "openssl-cve-2022-4304-bn_blinding_invert_ex/fixed.c"
relpath = "crypto/bn/bn_blind.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2022"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/bn/bn_blind.c"
function = "BN_BLINDING_invert_ex"
mechanism = "other"
sink = "unknown"
evidence = "Alternative fix for CVE-2022-4304"
[[pair]]
name = "openssl-cve-2022-4304-rsa_blinding_invert"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2022-4304"
cwe = "CWE-119"
commit = "a00d757d9ca212994625d1a02c81cc5edd27e13b"
parent = "908eaceb62624f5b5c505b286d904bd3a4e8a64a"
commit_url = "https://github.com/openssl/openssl/commit/a00d757d9ca212994625d1a02c81cc5edd27e13b"
vuln = "openssl-cve-2022-4304-rsa_blinding_invert/vuln.c"
fixed = "openssl-cve-2022-4304-rsa_blinding_invert/fixed.c"
relpath = "crypto/rsa/rsa_ossl.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2022"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/rsa/rsa_ossl.c"
function = "rsa_blinding_invert"
mechanism = "other"
sink = "unknown"
evidence = "Alternative fix for CVE-2022-4304"
[[pair]]
name = "openssl-cve-2023-0465"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2023-0465"
cwe = "CWE-119"
commit = "b013765abfa80036dc779dd0e50602c57bb3bf95"
parent = "f675d164e5d9648c3537a0f5efe1cc2fd232b4a9"
commit_url = "https://github.com/openssl/openssl/commit/b013765abfa80036dc779dd0e50602c57bb3bf95"
vuln = "openssl-cve-2023-0465/vuln.c"
fixed = "openssl-cve-2023-0465/fixed.c"
relpath = "crypto/x509/x509_vfy.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2023"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/x509/x509_vfy.c"
function = "check_policy"
mechanism = "other"
sink = "unknown"
evidence = "Ensure that EXFLAG_INVALID_POLICY is checked even in leaf certs"
[[pair]]
name = "openssl-cve-2023-0464"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2023-0464"
cwe = "CWE-119"
commit = "879f7080d7e141f415c79eaa3a8ac4a3dad0348b"
parent = "969327390220aee7515a4054d5189186402d6687"
commit_url = "https://github.com/openssl/openssl/commit/879f7080d7e141f415c79eaa3a8ac4a3dad0348b"
vuln = "openssl-cve-2023-0464/vuln.c"
fixed = "openssl-cve-2023-0464/fixed.c"
relpath = "crypto/x509v3/pcy_tree.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2023"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/x509v3/pcy_tree.c"
function = "tree_init"
mechanism = "other"
sink = "unknown"
evidence = "x509: excessive resource use verifying policy constraints"
[[pair]]
name = "openssl-cve-2023-0464-tree_init"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2023-0464"
cwe = "CWE-119"
commit = "959c59c7a0164117e7f8366466a32bb1f8d77ff1"
parent = "c309c4dce742c3eeb393a0f03f9c567d0e368ccc"
commit_url = "https://github.com/openssl/openssl/commit/959c59c7a0164117e7f8366466a32bb1f8d77ff1"
vuln = "openssl-cve-2023-0464-tree_init/vuln.c"
fixed = "openssl-cve-2023-0464-tree_init/fixed.c"
relpath = "crypto/x509/pcy_tree.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2023"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/x509/pcy_tree.c"
function = "tree_init"
mechanism = "other"
sink = "unknown"
evidence = "x509: excessive resource use verifying policy constraints"
[[pair]]
name = "openssl-cve-2021-3449"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "OpenSSL License"
repo = "openssl/openssl"
cve = "CVE-2021-3449"
cwe = "CWE-119"
commit = "2b9e2afc382490592078cdb69d06f54f0fefd4c6"
parent = "7b2625274f5d5ec90aee522ec4e4f3aa08fa5b70"
commit_url = "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6"
vuln = "openssl-cve-2021-3449/vuln.c"
fixed = "openssl-cve-2021-3449/fixed.c"
relpath = "ssl/record/methods/tls_common.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "ssl/record/methods/tls_common.c"
function = "tls_get_more_records"
mechanism = "other"
sink = "unknown"
evidence = "fuzz: make post handshake reachable"
[[pair]]
name = "openssl-cve-2021-3449-def_generate_session_id"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "OpenSSL License"
repo = "openssl/openssl"
cve = "CVE-2021-3449"
cwe = "CWE-119"
commit = "2b9e2afc382490592078cdb69d06f54f0fefd4c6"
parent = "7b2625274f5d5ec90aee522ec4e4f3aa08fa5b70"
commit_url = "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6"
vuln = "openssl-cve-2021-3449-def_generate_session_id/vuln.c"
fixed = "openssl-cve-2021-3449-def_generate_session_id/fixed.c"
relpath = "ssl/ssl_sess.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "ssl/ssl_sess.c"
function = "def_generate_session_id"
mechanism = "other"
sink = "unknown"
evidence = "fuzz: make post handshake reachable"
[[pair]]
name = "openssl-cve-2021-3449-tls_parse_ctos_renegotia"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "OpenSSL License"
repo = "openssl/openssl"
cve = "CVE-2021-3449"
cwe = "CWE-119"
commit = "2b9e2afc382490592078cdb69d06f54f0fefd4c6"
parent = "7b2625274f5d5ec90aee522ec4e4f3aa08fa5b70"
commit_url = "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6"
vuln = "openssl-cve-2021-3449-tls_parse_ctos_renegotia/vuln.c"
fixed = "openssl-cve-2021-3449-tls_parse_ctos_renegotia/fixed.c"
relpath = "ssl/statem/extensions_srvr.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "ssl/statem/extensions_srvr.c"
function = "tls_parse_ctos_renegotiate"
mechanism = "other"
sink = "unknown"
evidence = "fuzz: make post handshake reachable"
[[pair]]
name = "openssl-cve-2021-3449-tls_process_finished"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "OpenSSL License"
repo = "openssl/openssl"
cve = "CVE-2021-3449"
cwe = "CWE-119"
commit = "2b9e2afc382490592078cdb69d06f54f0fefd4c6"
parent = "7b2625274f5d5ec90aee522ec4e4f3aa08fa5b70"
commit_url = "https://github.com/openssl/openssl/commit/2b9e2afc382490592078cdb69d06f54f0fefd4c6"
vuln = "openssl-cve-2021-3449-tls_process_finished/vuln.c"
fixed = "openssl-cve-2021-3449-tls_process_finished/fixed.c"
relpath = "ssl/statem/statem_lib.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "ssl/statem/statem_lib.c"
function = "tls_process_finished"
mechanism = "other"
sink = "unknown"
evidence = "fuzz: make post handshake reachable"
[[pair]]
name = "openssl-cve-2023-0401"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2023-0401"
cwe = "CWE-119"
commit = "6eebe6c0238178356114a96a7858f36b24172847"
parent = "7880536fe17c2b5450e279155bedd51771d28c9f"
commit_url = "https://github.com/openssl/openssl/commit/6eebe6c0238178356114a96a7858f36b24172847"
vuln = "openssl-cve-2023-0401/vuln.c"
fixed = "openssl-cve-2023-0401/fixed.c"
relpath = "crypto/pkcs7/pk7_doit.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2023"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/pkcs7/pk7_doit.c"
function = "pkcs7_bio_add_digest"
mechanism = "other"
sink = "unknown"
evidence = "pk7_doit.c: Check return of BIO_set_md() calls"
[[pair]]
name = "openssl-cve-2023-0286-general_name_cmp"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2023-0286"
cwe = "CWE-119"
commit = "7880536fe17c2b5450e279155bedd51771d28c9f"
parent = "adf77d6657e836fc87391fad53d857927a764297"
commit_url = "https://github.com/openssl/openssl/commit/7880536fe17c2b5450e279155bedd51771d28c9f"
vuln = "openssl-cve-2023-0286-general_name_cmp/vuln.c"
fixed = "openssl-cve-2023-0286-general_name_cmp/fixed.c"
relpath = "crypto/x509/v3_genn.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2023"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/x509/v3_genn.c"
function = "GENERAL_NAME_cmp"
mechanism = "other"
sink = "unknown"
evidence = "Fix GENERAL_NAME_cmp for x400Address (master)"
[[pair]]
name = "openssl-cve-2023-0217"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2023-0217"
cwe = "CWE-119"
commit = "bcec03c33cc00a7b5eb89ebeeee59e604570a86a"
parent = "3436f9c24ab90c1661e4798e7944f028d5d251ce"
commit_url = "https://github.com/openssl/openssl/commit/bcec03c33cc00a7b5eb89ebeeee59e604570a86a"
vuln = "openssl-cve-2023-0217/vuln.c"
fixed = "openssl-cve-2023-0217/fixed.c"
relpath = "crypto/ffc/ffc_key_validate.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2023"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/ffc/ffc_key_validate.c"
function = "ossl_ffc_validate_public_key_partial"
mechanism = "other"
sink = "unknown"
evidence = "Fix NULL deference when validating FFC public key."
[[pair]]
name = "openssl-cve-2023-0216"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2023-0216"
cwe = "CWE-119"
commit = "80253dbdc92bec584f4a9866b43f8674156d838a"
parent = "625faca931957719c76fb16094cf5b6e0debe23f"
commit_url = "https://github.com/openssl/openssl/commit/80253dbdc92bec584f4a9866b43f8674156d838a"
vuln = "openssl-cve-2023-0216/vuln.c"
fixed = "openssl-cve-2023-0216/fixed.c"
relpath = "crypto/pkcs7/pk7_lib.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2023"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/pkcs7/pk7_lib.c"
function = "STACK_OF"
mechanism = "other"
sink = "unknown"
evidence = "Do not dereference PKCS7 object data if not set"
[[pair]]
name = "openssl-cve-2022-4304-rsa_ossl_private_decrypt"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2022-4304"
cwe = "CWE-119"
commit = "8022a4799fe884b3bf8d538e2b4c4ec323663118"
parent = "e2d0a3b5f559e23f11e4d4687b2889b483afb22a"
commit_url = "https://github.com/openssl/openssl/commit/8022a4799fe884b3bf8d538e2b4c4ec323663118"
vuln = "openssl-cve-2022-4304-rsa_ossl_private_decrypt/vuln.c"
fixed = "openssl-cve-2022-4304-rsa_ossl_private_decrypt/fixed.c"
relpath = "crypto/rsa/rsa_ossl.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2022"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/rsa/rsa_ossl.c"
function = "rsa_ossl_private_decrypt"
mechanism = "other"
sink = "unknown"
evidence = "Fix Timing Oracle in RSA decryption"
[[pair]]
name = "openssl-cve-2020-25659"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "OpenSSL License"
repo = "openssl/openssl"
cve = "CVE-2020-25659"
cwe = "CWE-119"
commit = "7fc67e0a33102aa47bbaa56533eeecb98c0450f7"
parent = "1ca61aa56090356bbdbb16cf48916fbd9886c78d"
commit_url = "https://github.com/openssl/openssl/commit/7fc67e0a33102aa47bbaa56533eeecb98c0450f7"
vuln = "openssl-cve-2020-25659/vuln.c"
fixed = "openssl-cve-2020-25659/fixed.c"
relpath = "crypto/rsa/rsa_ossl.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2020"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/rsa/rsa_ossl.c"
function = "rsa_ossl_private_decrypt"
mechanism = "other"
sink = "unknown"
evidence = "rsa: add implicit rejection in PKCS#1 v1.5"
[[pair]]
name = "openssl-cve-2022-3996"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2022-3996"
cwe = "CWE-119"
commit = "7725e7bfe6f2ce8146b6552b44e0d226be7638e7"
parent = "9a5c884999a55595e376083b3a165515c8123049"
commit_url = "https://github.com/openssl/openssl/commit/7725e7bfe6f2ce8146b6552b44e0d226be7638e7"
vuln = "openssl-cve-2022-3996/vuln.c"
fixed = "openssl-cve-2022-3996/fixed.c"
relpath = "crypto/x509/pcy_map.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2022"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/x509/pcy_map.c"
function = "ossl_policy_cache_set_mapping"
mechanism = "other"
sink = "unknown"
evidence = "x509: fix double locking problem"
[[pair]]
name = "openssl-cve-2022-3786-ossl_punycode_decode"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2022-3786"
cwe = "CWE-119"
commit = "680e65b94c916af259bfdc2e25f1ab6e0c7a97d6"
parent = "3b421ebc64c7b52f1b9feb3812bdc7781c784332"
commit_url = "https://github.com/openssl/openssl/commit/680e65b94c916af259bfdc2e25f1ab6e0c7a97d6"
vuln = "openssl-cve-2022-3786-ossl_punycode_decode/vuln.c"
fixed = "openssl-cve-2022-3786-ossl_punycode_decode/fixed.c"
relpath = "crypto/punycode.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2022"
[[pair.expected]]
cwe = "CWE-119"
class = "buffer overflow"
path = "crypto/punycode.c"
function = "ossl_punycode_decode"
mechanism = "unchecked_length_copy"
sink = "memcpy"
evidence = "Fix CVE-2022-3786 in punycode decoder."
[[pair]]
name = "openssl-cve-2022-3602-ossl_punycode_decode"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2022-3602"
cwe = "CWE-119"
commit = "3b421ebc64c7b52f1b9feb3812bdc7781c784332"
parent = "89d72311327735ef15c804d2adea84a0fb1bfa0a"
commit_url = "https://github.com/openssl/openssl/commit/3b421ebc64c7b52f1b9feb3812bdc7781c784332"
vuln = "openssl-cve-2022-3602-ossl_punycode_decode/vuln.c"
fixed = "openssl-cve-2022-3602-ossl_punycode_decode/fixed.c"
relpath = "crypto/punycode.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2022"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/punycode.c"
function = "ossl_punycode_decode"
mechanism = "other"
sink = "unknown"
evidence = "Fix CVE-2022-3602 in punycode decoder."
[[pair]]
name = "openssl-cve-2022-3358"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2022-3358"
cwe = "CWE-476"
commit = "5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b"
parent = "9f0867da4cbf77ed642717b5e703e09ab2c087a0"
commit_url = "https://github.com/openssl/openssl/commit/5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b"
vuln = "openssl-cve-2022-3358/vuln.c"
fixed = "openssl-cve-2022-3358/fixed.c"
relpath = "crypto/evp/digest.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2022"
[[pair.expected]]
cwe = "CWE-476"
class = "null pointer dereference"
path = "crypto/evp/digest.c"
function = "evp_md_init_internal"
mechanism = "null_deref_unguarded"
sink = "NULL"
evidence = "Fix usage of custom EVP_CIPHER objects"
[[pair]]
name = "openssl-cve-2022-3358-evp_cipher_init_internal"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2022-3358"
cwe = "CWE-476"
commit = "5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b"
parent = "9f0867da4cbf77ed642717b5e703e09ab2c087a0"
commit_url = "https://github.com/openssl/openssl/commit/5485c56679d7c49b96e8fc8ca708b0b7e7c03c4b"
vuln = "openssl-cve-2022-3358-evp_cipher_init_internal/vuln.c"
fixed = "openssl-cve-2022-3358-evp_cipher_init_internal/fixed.c"
relpath = "crypto/evp/evp_enc.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2022"
[[pair.expected]]
cwe = "CWE-476"
class = "null pointer dereference"
path = "crypto/evp/evp_enc.c"
function = "evp_cipher_init_internal"
mechanism = "null_deref_unguarded"
sink = "NULL"
evidence = "Fix usage of custom EVP_CIPHER objects"
[[pair]]
name = "openssl-cve-2022-2068-hash_dir"
slice = "vfc"
language = "unknown"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2022-2068"
cwe = "CWE-119"
commit = "2c9c35870601b4a44d86ddbf512b38df38285cfa"
parent = "abebcec7b1a30fbb1fd5c5cbbe8817690c139163"
commit_url = "https://github.com/openssl/openssl/commit/2c9c35870601b4a44d86ddbf512b38df38285cfa"
vuln = "openssl-cve-2022-2068-hash_dir/vuln.in"
fixed = "openssl-cve-2022-2068-hash_dir/fixed.in"
relpath = "tools/c_rehash.in"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2022"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "tools/c_rehash.in"
function = "hash_dir"
mechanism = "other"
sink = "unknown"
evidence = "Fix file operations in c_rehash."
[[pair]]
name = "openssl-cve-2022-29242"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2022-29242"
cwe = "CWE-119"
commit = "373de40f3f76c63e4f2684abd86706f3863347ca"
parent = "3be529cd2eb4eb3eaaa7913af619fb9c918d4581"
commit_url = "https://github.com/openssl/openssl/commit/373de40f3f76c63e4f2684abd86706f3863347ca"
vuln = "openssl-cve-2022-29242/vuln.c"
fixed = "openssl-cve-2022-29242/fixed.c"
relpath = "ssl/statem/statem_clnt.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2022"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "ssl/statem/statem_clnt.c"
function = "tls_construct_cke_gost18"
mechanism = "other"
sink = "unknown"
evidence = "Use safe pattern for buffer size determining in case of GOST key exchange"
[[pair]]
name = "openssl-cve-2022-1434"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2022-1434"
cwe = "CWE-119"
commit = "7d56a74a96828985db7354a55227a511615f732b"
parent = "55c80c222293a972587004c185dc5653ae207a0e"
commit_url = "https://github.com/openssl/openssl/commit/7d56a74a96828985db7354a55227a511615f732b"
vuln = "openssl-cve-2022-1434/vuln.c"
fixed = "openssl-cve-2022-1434/fixed.c"
relpath = "providers/implementations/ciphers/cipher_rc4_hmac_md5.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2022"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "providers/implementations/ciphers/cipher_rc4_hmac_md5.c"
function = "rc4_hmac_md5_set_ctx_params"
mechanism = "other"
sink = "unknown"
evidence = "Fix the RC4-MD5 cipher"
[[pair]]
name = "openssl-cve-2022-1343"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "Apache-2.0"
repo = "openssl/openssl"
cve = "CVE-2022-1343"
cwe = "CWE-119"
commit = "2eda98790c5c2741d76d23cc1e74b0dc4f4b391a"
parent = "ae3ece03a61e8822fd7ea58f44812871efba82d1"
commit_url = "https://github.com/openssl/openssl/commit/2eda98790c5c2741d76d23cc1e74b0dc4f4b391a"
vuln = "openssl-cve-2022-1343/vuln.c"
fixed = "openssl-cve-2022-1343/fixed.c"
relpath = "crypto/ocsp/ocsp_vfy.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2022"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/ocsp/ocsp_vfy.c"
function = "ocsp_verify_signer"
mechanism = "other"
sink = "unknown"
evidence = "Fix OCSP_basic_verify signer certificate validation"
[[pair]]
name = "openssl-cve-2021-4044"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "OpenSSL License"
repo = "openssl/openssl"
cve = "CVE-2021-4044"
cwe = "CWE-119"
commit = "d69ae8a93bfc0f2489c008fcf303a98d77a6df4d"
parent = "758754966791c537ea95241438454aa86f91f256"
commit_url = "https://github.com/openssl/openssl/commit/d69ae8a93bfc0f2489c008fcf303a98d77a6df4d"
vuln = "openssl-cve-2021-4044/vuln.c"
fixed = "openssl-cve-2021-4044/fixed.c"
relpath = "crypto/x509/x509_vfy.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/x509/x509_vfy.c"
function = "has_san_id"
mechanism = "other"
sink = "unknown"
evidence = "Fix infinite verification loops due to has_san_id"
[[pair]]
name = "openssl-cve-2021-4044-tls_post_process_server_"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "OpenSSL License"
repo = "openssl/openssl"
cve = "CVE-2021-4044"
cwe = "CWE-119"
commit = "758754966791c537ea95241438454aa86f91f256"
parent = "8e78289c4e6f4c9f2fec073b78443736e689854d"
commit_url = "https://github.com/openssl/openssl/commit/758754966791c537ea95241438454aa86f91f256"
vuln = "openssl-cve-2021-4044-tls_post_process_server_/vuln.c"
fixed = "openssl-cve-2021-4044-tls_post_process_server_/fixed.c"
relpath = "ssl/statem/statem_clnt.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "ssl/statem/statem_clnt.c"
function = "tls_post_process_server_certificate"
mechanism = "other"
sink = "unknown"
evidence = "Fix invalid handling of verify errors in libssl"
[[pair]]
name = "openssl-cve-2021-3711-sm2_asym_decrypt"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "OpenSSL License"
repo = "openssl/openssl"
cve = "CVE-2021-3711"
cwe = "CWE-119"
commit = "36cf45ef3ba71e44a8be06ee81cb31aa02cb0010"
parent = "4b8a8bb75229b64d1c7598d845fdc3c7e7d7eee2"
commit_url = "https://github.com/openssl/openssl/commit/36cf45ef3ba71e44a8be06ee81cb31aa02cb0010"
vuln = "openssl-cve-2021-3711-sm2_asym_decrypt/vuln.c"
fixed = "openssl-cve-2021-3711-sm2_asym_decrypt/fixed.c"
relpath = "providers/implementations/asymciphers/sm2_enc.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "providers/implementations/asymciphers/sm2_enc.c"
function = "sm2_asym_decrypt"
mechanism = "other"
sink = "unknown"
evidence = "Correctly calculate the length of SM2 plaintext given the ciphertext"
[[pair]]
name = "openssl-cve-2021-3712-netscape_spki_print"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "OpenSSL License"
repo = "openssl/openssl"
cve = "CVE-2021-3712"
cwe = "CWE-119"
commit = "7c038a6bcd98d4bbfd2c2892a87a1138d2f7c5f3"
parent = "98624776c4d501c8badd6f772ab7048ac9191cb9"
commit_url = "https://github.com/openssl/openssl/commit/7c038a6bcd98d4bbfd2c2892a87a1138d2f7c5f3"
vuln = "openssl-cve-2021-3712-netscape_spki_print/vuln.c"
fixed = "openssl-cve-2021-3712-netscape_spki_print/fixed.c"
relpath = "crypto/asn1/t_spki.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/asn1/t_spki.c"
function = "NETSCAPE_SPKI_print"
mechanism = "other"
sink = "unknown"
evidence = "Fix NETSCAPE_SPKI_print function to not assume NUL terminated strings"
[[pair]]
name = "openssl-cve-2021-3712-append_ia5"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "OpenSSL License"
repo = "openssl/openssl"
cve = "CVE-2021-3712"
cwe = "CWE-119"
commit = "98624776c4d501c8badd6f772ab7048ac9191cb9"
parent = "1f365708a3318a5f1a395f90c38b584a58d37fb9"
commit_url = "https://github.com/openssl/openssl/commit/98624776c4d501c8badd6f772ab7048ac9191cb9"
vuln = "openssl-cve-2021-3712-append_ia5/vuln.c"
fixed = "openssl-cve-2021-3712-append_ia5/fixed.c"
relpath = "crypto/x509/v3_utl.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/x509/v3_utl.c"
function = "append_ia5"
mechanism = "other"
sink = "unknown"
evidence = "Fix append_ia5 function to not assume NUL terminated strings"
[[pair]]
name = "openssl-cve-2021-3712-ossl_cmp_hdr_push1_freet"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "OpenSSL License"
repo = "openssl/openssl"
cve = "CVE-2021-3712"
cwe = "CWE-119"
commit = "95f8c1e142df835d03b5b62521383a462fc5470d"
parent = "d2015a783e64613d8e4a142fa05048d1863df944"
commit_url = "https://github.com/openssl/openssl/commit/95f8c1e142df835d03b5b62521383a462fc5470d"
vuln = "openssl-cve-2021-3712-ossl_cmp_hdr_push1_freet/vuln.c"
fixed = "openssl-cve-2021-3712-ossl_cmp_hdr_push1_freet/fixed.c"
relpath = "crypto/cmp/cmp_hdr.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/cmp/cmp_hdr.c"
function = "ossl_cmp_hdr_push1_freeText"
mechanism = "other"
sink = "unknown"
evidence = "Fix CMP code to not assume NUL terminated strings"
[[pair]]
name = "openssl-cve-2021-3712-ia5ncasecmp"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "OpenSSL License"
repo = "openssl/openssl"
cve = "CVE-2021-3712"
cwe = "CWE-119"
commit = "d2015a783e64613d8e4a142fa05048d1863df944"
parent = "918430ba80d94ec8f05383b43b1872b1ebb13e1a"
commit_url = "https://github.com/openssl/openssl/commit/d2015a783e64613d8e4a142fa05048d1863df944"
vuln = "openssl-cve-2021-3712-ia5ncasecmp/vuln.c"
fixed = "openssl-cve-2021-3712-ia5ncasecmp/fixed.c"
relpath = "crypto/x509/v3_ncons.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/x509/v3_ncons.c"
function = "ia5ncasecmp"
mechanism = "other"
sink = "unknown"
evidence = "Fix the name constraints code to not assume NUL terminated strings"
[[pair]]
name = "openssl-cve-2021-3712-i2r_pci"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "OpenSSL License"
repo = "openssl/openssl"
cve = "CVE-2021-3712"
cwe = "CWE-119"
commit = "918430ba80d94ec8f05383b43b1872b1ebb13e1a"
parent = "b2b3b9c9936b91315adc0f3254879cb2fd5ca2bd"
commit_url = "https://github.com/openssl/openssl/commit/918430ba80d94ec8f05383b43b1872b1ebb13e1a"
vuln = "openssl-cve-2021-3712-i2r_pci/vuln.c"
fixed = "openssl-cve-2021-3712-i2r_pci/fixed.c"
relpath = "crypto/x509/v3_pci.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/x509/v3_pci.c"
function = "i2r_pci"
mechanism = "other"
sink = "unknown"
evidence = "Fix printing of PROXY_CERT_INFO_EXTENSION to not assume NUL terminated strings"
[[pair]]
name = "openssl-cve-2021-3712-general_name_print"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "OpenSSL License"
repo = "openssl/openssl"
cve = "CVE-2021-3712"
cwe = "CWE-119"
commit = "b2b3b9c9936b91315adc0f3254879cb2fd5ca2bd"
parent = "1747d4658b3830951068a6a6c1fa2b45c4731fb3"
commit_url = "https://github.com/openssl/openssl/commit/b2b3b9c9936b91315adc0f3254879cb2fd5ca2bd"
vuln = "openssl-cve-2021-3712-general_name_print/vuln.c"
fixed = "openssl-cve-2021-3712-general_name_print/fixed.c"
relpath = "crypto/x509/v3_san.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/x509/v3_san.c"
function = "GENERAL_NAME_print"
mechanism = "other"
sink = "unknown"
evidence = "Fix GENERAL_NAME_print to not assume NUL terminated strings"
[[pair]]
name = "openssl-cve-2021-3712-print_qualifiers"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "OpenSSL License"
repo = "openssl/openssl"
cve = "CVE-2021-3712"
cwe = "CWE-119"
commit = "1747d4658b3830951068a6a6c1fa2b45c4731fb3"
parent = "ad6ac17489241574136b7d035f01f6175dd9c941"
commit_url = "https://github.com/openssl/openssl/commit/1747d4658b3830951068a6a6c1fa2b45c4731fb3"
vuln = "openssl-cve-2021-3712-print_qualifiers/vuln.c"
fixed = "openssl-cve-2021-3712-print_qualifiers/fixed.c"
relpath = "crypto/x509/v3_cpols.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/x509/v3_cpols.c"
function = "print_qualifiers"
mechanism = "other"
sink = "unknown"
evidence = "Fix POLICYINFO printing to not assume NUL terminated strings"
[[pair]]
name = "openssl-cve-2021-3711-pkey_sm2_decrypt"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "OpenSSL License"
repo = "openssl/openssl"
cve = "CVE-2021-3711"
cwe = "CWE-119"
commit = "59f5e75f3bced8fc0e130d72a3f582cf7b480b46"
parent = "8c74c9d1ade0fbdab5b815ddb747351b8b839641"
commit_url = "https://github.com/openssl/openssl/commit/59f5e75f3bced8fc0e130d72a3f582cf7b480b46"
vuln = "openssl-cve-2021-3711-pkey_sm2_decrypt/vuln.c"
fixed = "openssl-cve-2021-3711-pkey_sm2_decrypt/fixed.c"
relpath = "crypto/sm2/sm2_pmeth.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/sm2/sm2_pmeth.c"
function = "pkey_sm2_decrypt"
mechanism = "other"
sink = "unknown"
evidence = "Correctly calculate the length of SM2 plaintext given the ciphertext"
[[pair]]
name = "openssl-cve-2021-3449-ssl_generate_master_secr"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "OpenSSL License"
repo = "openssl/openssl"
cve = "CVE-2021-3449"
cwe = "CWE-119"
commit = "39a140597d874e554b736885ac4dea16ac40a87a"
parent = "02b1636fe3db274497304a3e95a4e32ced7e841b"
commit_url = "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a"
vuln = "openssl-cve-2021-3449-ssl_generate_master_secr/vuln.c"
fixed = "openssl-cve-2021-3449-ssl_generate_master_secr/fixed.c"
relpath = "ssl/s3_lib.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "ssl/s3_lib.c"
function = "ssl_generate_master_secret"
mechanism = "other"
sink = "unknown"
evidence = "Ensure buffer/length pairs are always in sync"
[[pair]]
name = "openssl-cve-2021-3449-ssl_ctx_set_alpn_protos"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "OpenSSL License"
repo = "openssl/openssl"
cve = "CVE-2021-3449"
cwe = "CWE-119"
commit = "39a140597d874e554b736885ac4dea16ac40a87a"
parent = "02b1636fe3db274497304a3e95a4e32ced7e841b"
commit_url = "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a"
vuln = "openssl-cve-2021-3449-ssl_ctx_set_alpn_protos/vuln.c"
fixed = "openssl-cve-2021-3449-ssl_ctx_set_alpn_protos/fixed.c"
relpath = "ssl/ssl_lib.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "ssl/ssl_lib.c"
function = "SSL_CTX_set_alpn_protos"
mechanism = "other"
sink = "unknown"
evidence = "Ensure buffer/length pairs are always in sync"
[[pair]]
name = "openssl-cve-2021-3449-init_sig_algs_cert"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "OpenSSL License"
repo = "openssl/openssl"
cve = "CVE-2021-3449"
cwe = "CWE-119"
commit = "39a140597d874e554b736885ac4dea16ac40a87a"
parent = "02b1636fe3db274497304a3e95a4e32ced7e841b"
commit_url = "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a"
vuln = "openssl-cve-2021-3449-init_sig_algs_cert/vuln.c"
fixed = "openssl-cve-2021-3449-init_sig_algs_cert/fixed.c"
relpath = "ssl/statem/extensions.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "ssl/statem/extensions.c"
function = "init_sig_algs_cert"
mechanism = "other"
sink = "unknown"
evidence = "Ensure buffer/length pairs are always in sync"
[[pair]]
name = "openssl-cve-2021-3449-tls_construct_ctos_early"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "OpenSSL License"
repo = "openssl/openssl"
cve = "CVE-2021-3449"
cwe = "CWE-119"
commit = "39a140597d874e554b736885ac4dea16ac40a87a"
parent = "02b1636fe3db274497304a3e95a4e32ced7e841b"
commit_url = "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a"
vuln = "openssl-cve-2021-3449-tls_construct_ctos_early/vuln.c"
fixed = "openssl-cve-2021-3449-tls_construct_ctos_early/fixed.c"
relpath = "ssl/statem/extensions_clnt.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "ssl/statem/extensions_clnt.c"
function = "tls_construct_ctos_early_data"
mechanism = "other"
sink = "unknown"
evidence = "Ensure buffer/length pairs are always in sync"
[[pair]]
name = "openssl-cve-2021-3449-tls_process_certificate_"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "OpenSSL License"
repo = "openssl/openssl"
cve = "CVE-2021-3449"
cwe = "CWE-119"
commit = "39a140597d874e554b736885ac4dea16ac40a87a"
parent = "02b1636fe3db274497304a3e95a4e32ced7e841b"
commit_url = "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a"
vuln = "openssl-cve-2021-3449-tls_process_certificate_/vuln.c"
fixed = "openssl-cve-2021-3449-tls_process_certificate_/fixed.c"
relpath = "ssl/statem/statem_clnt.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "ssl/statem/statem_clnt.c"
function = "tls_process_certificate_request"
mechanism = "other"
sink = "unknown"
evidence = "Ensure buffer/length pairs are always in sync"
[[pair]]
name = "openssl-cve-2021-3449-tls_handle_alpn"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "OpenSSL License"
repo = "openssl/openssl"
cve = "CVE-2021-3449"
cwe = "CWE-119"
commit = "39a140597d874e554b736885ac4dea16ac40a87a"
parent = "02b1636fe3db274497304a3e95a4e32ced7e841b"
commit_url = "https://github.com/openssl/openssl/commit/39a140597d874e554b736885ac4dea16ac40a87a"
vuln = "openssl-cve-2021-3449-tls_handle_alpn/vuln.c"
fixed = "openssl-cve-2021-3449-tls_handle_alpn/fixed.c"
relpath = "ssl/statem/statem_srvr.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "ssl/statem/statem_srvr.c"
function = "tls_handle_alpn"
mechanism = "other"
sink = "unknown"
evidence = "Ensure buffer/length pairs are always in sync"
[[pair]]
name = "openssl-cve-2021-3449-init_sig_algs"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "OpenSSL License"
repo = "openssl/openssl"
cve = "CVE-2021-3449"
cwe = "CWE-476"
commit = "02b1636fe3db274497304a3e95a4e32ced7e841b"
parent = "112580c27b829b0ac0874d5c5787195f27c7952c"
commit_url = "https://github.com/openssl/openssl/commit/02b1636fe3db274497304a3e95a4e32ced7e841b"
vuln = "openssl-cve-2021-3449-init_sig_algs/vuln.c"
fixed = "openssl-cve-2021-3449-init_sig_algs/fixed.c"
relpath = "ssl/statem/extensions.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-476"
class = "null pointer dereference"
path = "ssl/statem/extensions.c"
function = "init_sig_algs"
mechanism = "null_deref_unguarded"
sink = "NULL"
evidence = "ssl sigalg extension: fix NULL pointer dereference"
[[pair]]
name = "openssl-cve-2021-3450"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "OpenSSL License"
repo = "openssl/openssl"
cve = "CVE-2021-3450"
cwe = "CWE-119"
commit = "2a40b7bc7b94dd7de897a74571e7024f0cf0d63b"
parent = "cfd74383d9b06f85cb1e166180346115a3f9a452"
commit_url = "https://github.com/openssl/openssl/commit/2a40b7bc7b94dd7de897a74571e7024f0cf0d63b"
vuln = "openssl-cve-2021-3450/vuln.c"
fixed = "openssl-cve-2021-3450/fixed.c"
relpath = "crypto/x509/x509_vfy.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/x509/x509_vfy.c"
function = "check_chain_extensions"
mechanism = "other"
sink = "unknown"
evidence = "check_chain_extensions: Do not override error return value by check_curve"
[[pair]]
name = "openssl-cve-2021-23840-evp_encryptdecryptupdate"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "OpenSSL License"
repo = "openssl/openssl"
cve = "CVE-2021-23840"
cwe = "CWE-119"
commit = "6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1"
parent = "481a88f13c44996a008195791ea0dc076b968774"
commit_url = "https://github.com/openssl/openssl/commit/6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1"
vuln = "openssl-cve-2021-23840-evp_encryptdecryptupdate/vuln.c"
fixed = "openssl-cve-2021-23840-evp_encryptdecryptupdate/fixed.c"
relpath = "crypto/evp/evp_enc.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-119"
class = "buffer overflow"
path = "crypto/evp/evp_enc.c"
function = "evp_EncryptDecryptUpdate"
mechanism = "unchecked_length_copy"
sink = "memcpy"
evidence = "Don't overflow the output length in EVP_CipherUpdate calls"
[[pair]]
name = "openssl-cve-2021-23841"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "OpenSSL License"
repo = "openssl/openssl"
cve = "CVE-2021-23841"
cwe = "CWE-476"
commit = "122a19ab48091c657f7cb1fb3af9fc07bd557bbf"
parent = "c8c6e7438c03b2fc24e7ead460feeaef04911fb4"
commit_url = "https://github.com/openssl/openssl/commit/122a19ab48091c657f7cb1fb3af9fc07bd557bbf"
vuln = "openssl-cve-2021-23841/vuln.c"
fixed = "openssl-cve-2021-23841/fixed.c"
relpath = "crypto/x509/x509_cmp.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-476"
class = "null pointer dereference"
path = "crypto/x509/x509_cmp.c"
function = "X509_issuer_and_serial_hash"
mechanism = "null_deref_unguarded"
sink = "NULL"
evidence = "Fix Null pointer deref in X509_issuer_and_serial_hash()"
[[pair]]
name = "openssl-cve-2020-1971-general_name_cmp"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "OpenSSL License"
repo = "openssl/openssl"
cve = "CVE-2020-1971"
cwe = "CWE-119"
commit = "f960d81215ebf3f65e03d4d5d857fb9b666d6920"
parent = "aa0ad2011d3e7ad8a611da274ef7d9c7706e289b"
commit_url = "https://github.com/openssl/openssl/commit/f960d81215ebf3f65e03d4d5d857fb9b666d6920"
vuln = "openssl-cve-2020-1971-general_name_cmp/vuln.c"
fixed = "openssl-cve-2020-1971-general_name_cmp/fixed.c"
relpath = "crypto/x509v3/v3_genn.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2020"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "crypto/x509v3/v3_genn.c"
function = "GENERAL_NAME_cmp"
mechanism = "other"
sink = "unknown"
evidence = "Correctly compare EdiPartyName in GENERAL_NAME_cmp()"
[[pair]]
name = "openssl-cve-2020-1967-tls1_check_sig_alg"
slice = "vfc"
language = "c_cpp"
origin = "openssl"
license = "OpenSSL License"
repo = "openssl/openssl"
cve = "CVE-2020-1967"
cwe = "CWE-476"
commit = "a87f3fe01a5a894aa27ccd6a239155fd129988e4"
parent = "3656c08ab4b1b892730cb5e808b6f4298b08a2e6"
commit_url = "https://github.com/openssl/openssl/commit/a87f3fe01a5a894aa27ccd6a239155fd129988e4"
vuln = "openssl-cve-2020-1967-tls1_check_sig_alg/vuln.c"
fixed = "openssl-cve-2020-1967-tls1_check_sig_alg/fixed.c"
relpath = "ssl/t1_lib.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2020"
[[pair.expected]]
cwe = "CWE-476"
class = "null pointer dereference"
path = "ssl/t1_lib.c"
function = "tls1_check_sig_alg"
mechanism = "null_deref_unguarded"
sink = "NULL"
evidence = "Fix NULL dereference in SSL_check_chain() for TLS 1.3"
[[pair]]
name = "curl-cve-2026-9080"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2026-9080"
cwe = "CWE-119"
commit = "e9a2b0dc72dd3a9aa3a5210e89079a3b719475dc"
parent = "f746780a1e548b4b93790b58d70c3b22fde5360d"
commit_url = "https://github.com/curl/curl/commit/e9a2b0dc72dd3a9aa3a5210e89079a3b719475dc"
vuln = "curl-cve-2026-9080/vuln.c"
fixed = "curl-cve-2026-9080/fixed.c"
relpath = "lib/multi_ev.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2026"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "lib/multi_ev.c"
function = "mev_forget_socket"
mechanism = "other"
sink = "unknown"
evidence = "multi_ev: refresh sock entry after remove callback"
[[pair]]
name = "curl-cve-2023-38545-do_socks5"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2023-38545"
cwe = "CWE-119"
commit = "fb4415d8aee6c1045be932a34fe6107c2f5ed147"
parent = "09e25b9d94f4106eac8ca3a43b221bdc66f405e4"
commit_url = "https://github.com/curl/curl/commit/fb4415d8aee6c1045be932a34fe6107c2f5ed147"
vuln = "curl-cve-2023-38545-do_socks5/vuln.c"
fixed = "curl-cve-2023-38545-do_socks5/fixed.c"
relpath = "lib/socks.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2023"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "lib/socks.c"
function = "do_SOCKS5"
mechanism = "other"
sink = "unknown"
evidence = "socks: return error if hostname too long for remote resolve"
[[pair]]
name = "curl-cve-2022-32207"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2022-32207"
cwe = "CWE-119"
commit = "20f9dd6bae50b7223171b17ba7798946e74f877f"
parent = "46f8911d3942dc06fdd67e9f6f3908982e5d2fb4"
commit_url = "https://github.com/curl/curl/commit/20f9dd6bae50b7223171b17ba7798946e74f877f"
vuln = "curl-cve-2022-32207/vuln.c"
fixed = "curl-cve-2022-32207/fixed.c"
relpath = "lib/cookie.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2022"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "lib/cookie.c"
function = "cookie_output"
mechanism = "other"
sink = "unknown"
evidence = "fopen: add Curl_fopen() for better overwriting of files"
[[pair]]
name = "curl-cve-2022-32206"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2022-32206"
cwe = "CWE-119"
commit = "3a09fbb7f264c67c438d01a30669ce325aa508e2"
parent = "6ecdf5136b52af747e7bda08db9a748256b1cd09"
commit_url = "https://github.com/curl/curl/commit/3a09fbb7f264c67c438d01a30669ce325aa508e2"
vuln = "curl-cve-2022-32206/vuln.c"
fixed = "curl-cve-2022-32206/fixed.c"
relpath = "lib/content_encoding.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2022"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "lib/content_encoding.c"
function = "Curl_build_unencoding_stack"
mechanism = "other"
sink = "unknown"
evidence = "content_encoding: return error on too many compression steps"
[[pair]]
name = "curl-cve-2022-32208"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2022-32208"
cwe = "CWE-119"
commit = "6ecdf5136b52af747e7bda08db9a748256b1cd09"
parent = "2b67a0a1129b20a56ed04859fec8999f5c0c4280"
commit_url = "https://github.com/curl/curl/commit/6ecdf5136b52af747e7bda08db9a748256b1cd09"
vuln = "curl-cve-2022-32208/vuln.c"
fixed = "curl-cve-2022-32208/fixed.c"
relpath = "lib/krb5.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2022"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "lib/krb5.c"
function = "read_data"
mechanism = "other"
sink = "unknown"
evidence = "krb5: return error properly on decode errors"
[[pair]]
name = "curl-cve-2022-27782-curl_init_userdefined"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2022-27782"
cwe = "CWE-119"
commit = "f18af4f874cecab82a9797e8c7541e0990c7a64c"
parent = "7e92d12b4e6911f424678a133b19de670e183a59"
commit_url = "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c"
vuln = "curl-cve-2022-27782-curl_init_userdefined/vuln.c"
fixed = "curl-cve-2022-27782-curl_init_userdefined/fixed.c"
relpath = "lib/url.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2022"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "lib/url.c"
function = "Curl_init_userdefined"
mechanism = "other"
sink = "unknown"
evidence = "tls: check more TLS details for connection reuse"
[[pair]]
name = "curl-cve-2022-27782-gtls_shutdown"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2022-27782"
cwe = "CWE-119"
commit = "f18af4f874cecab82a9797e8c7541e0990c7a64c"
parent = "7e92d12b4e6911f424678a133b19de670e183a59"
commit_url = "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c"
vuln = "curl-cve-2022-27782-gtls_shutdown/vuln.c"
fixed = "curl-cve-2022-27782-gtls_shutdown/fixed.c"
relpath = "lib/vtls/gtls.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2022"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "lib/vtls/gtls.c"
function = "gtls_shutdown"
mechanism = "other"
sink = "unknown"
evidence = "tls: check more TLS details for connection reuse"
[[pair]]
name = "curl-cve-2022-27782-nss_setup_connect"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2022-27782"
cwe = "CWE-119"
commit = "f18af4f874cecab82a9797e8c7541e0990c7a64c"
parent = "7e92d12b4e6911f424678a133b19de670e183a59"
commit_url = "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c"
vuln = "curl-cve-2022-27782-nss_setup_connect/vuln.c"
fixed = "curl-cve-2022-27782-nss_setup_connect/fixed.c"
relpath = "lib/vtls/nss.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2022"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "lib/vtls/nss.c"
function = "nss_setup_connect"
mechanism = "other"
sink = "unknown"
evidence = "tls: check more TLS details for connection reuse"
[[pair]]
name = "curl-cve-2022-27782-ossl_connect_step1"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2022-27782"
cwe = "CWE-119"
commit = "f18af4f874cecab82a9797e8c7541e0990c7a64c"
parent = "7e92d12b4e6911f424678a133b19de670e183a59"
commit_url = "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c"
vuln = "curl-cve-2022-27782-ossl_connect_step1/vuln.c"
fixed = "curl-cve-2022-27782-ossl_connect_step1/fixed.c"
relpath = "lib/vtls/openssl.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2022"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "lib/vtls/openssl.c"
function = "ossl_connect_step1"
mechanism = "other"
sink = "unknown"
evidence = "tls: check more TLS details for connection reuse"
[[pair]]
name = "curl-cve-2022-27782-curl_free_primary_ssl_co"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2022-27782"
cwe = "CWE-119"
commit = "f18af4f874cecab82a9797e8c7541e0990c7a64c"
parent = "7e92d12b4e6911f424678a133b19de670e183a59"
commit_url = "https://github.com/curl/curl/commit/f18af4f874cecab82a9797e8c7541e0990c7a64c"
vuln = "curl-cve-2022-27782-curl_free_primary_ssl_co/vuln.c"
fixed = "curl-cve-2022-27782-curl_free_primary_ssl_co/fixed.c"
relpath = "lib/vtls/vtls.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2022"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "lib/vtls/vtls.c"
function = "Curl_free_primary_ssl_config"
mechanism = "other"
sink = "unknown"
evidence = "tls: check more TLS details for connection reuse"
[[pair]]
name = "curl-cve-2022-27778"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2022-27778"
cwe = "CWE-119"
commit = "8c7ee9083d0d719d0a77ab20d9cc2ae84eeea7f3"
parent = "fae6fea209a2d4db1582f608bd8cc8000721733a"
commit_url = "https://github.com/curl/curl/commit/8c7ee9083d0d719d0a77ab20d9cc2ae84eeea7f3"
vuln = "curl-cve-2022-27778/vuln.c"
fixed = "curl-cve-2022-27778/fixed.c"
relpath = "src/tool_operate.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2022"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "src/tool_operate.c"
function = "post_per_transfer"
mechanism = "other"
sink = "unknown"
evidence = "post_per_transfer: remove the updated file name"
[[pair]]
name = "curl-cve-2022-30115"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2022-30115"
cwe = "CWE-119"
commit = "fae6fea209a2d4db1582f608bd8cc8000721733a"
parent = "ff3ee510c328db03bf171cae6179bb9463fb054f"
commit_url = "https://github.com/curl/curl/commit/fae6fea209a2d4db1582f608bd8cc8000721733a"
vuln = "curl-cve-2022-30115/vuln.c"
fixed = "curl-cve-2022-30115/fixed.c"
relpath = "lib/hsts.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2022"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "lib/hsts.c"
function = "hsts_create"
mechanism = "other"
sink = "unknown"
evidence = "hsts: ignore trailing dots when comparing hosts names"
[[pair]]
name = "curl-cve-2022-27780"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2022-27780"
cwe = "CWE-119"
commit = "914aaab9153764ef8fa4178215b8ad89d3ac263a"
parent = "5c7da89d404bf59c8dd82a001119a16d18365917"
commit_url = "https://github.com/curl/curl/commit/914aaab9153764ef8fa4178215b8ad89d3ac263a"
vuln = "curl-cve-2022-27780/vuln.c"
fixed = "curl-cve-2022-27780/fixed.c"
relpath = "lib/urlapi.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2022"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "lib/urlapi.c"
function = "hostname_check"
mechanism = "other"
sink = "unknown"
evidence = "urlapi: reject percent-decoding host name into separator bytes"
[[pair]]
name = "curl-cve-2022-27774"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2022-27774"
cwe = "CWE-119"
commit = "620ea21410030a9977396b4661806bc187231b79"
parent = "08b8ef4e726ba10f45081ecda5b3cea788d3c839"
commit_url = "https://github.com/curl/curl/commit/620ea21410030a9977396b4661806bc187231b79"
vuln = "curl-cve-2022-27774/vuln.c"
fixed = "curl-cve-2022-27774/fixed.c"
relpath = "lib/transfer.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2022"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "lib/transfer.c"
function = "Curl_follow"
mechanism = "other"
sink = "unknown"
evidence = "transfer: redirects to other protocols or ports clear auth"
[[pair]]
name = "curl-cve-2022-27776"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2022-27776"
cwe = "CWE-119"
commit = "6e659993952aa5f90f48864be84a1bbb047fc258"
parent = "8f2079154f80561ccffcaa954268798b658e66b6"
commit_url = "https://github.com/curl/curl/commit/6e659993952aa5f90f48864be84a1bbb047fc258"
vuln = "curl-cve-2022-27776/vuln.c"
fixed = "curl-cve-2022-27776/fixed.c"
relpath = "lib/http.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2022"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "lib/http.c"
function = "Curl_add_custom_headers"
mechanism = "other"
sink = "unknown"
evidence = "http: avoid auth/cookie on redirects same host diff port"
[[pair]]
name = "curl-cve-2022-27775"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2022-27775"
cwe = "CWE-119"
commit = "058f98dc3fe595f21dc26a5b9b1699e519ba5705"
parent = "852aa5ad351ea53e5f01d2f44b5b4370c2bf5425"
commit_url = "https://github.com/curl/curl/commit/058f98dc3fe595f21dc26a5b9b1699e519ba5705"
vuln = "curl-cve-2022-27775/vuln.c"
fixed = "curl-cve-2022-27775/fixed.c"
relpath = "lib/conncache.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2022"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "lib/conncache.c"
function = "hashkey"
mechanism = "other"
sink = "unknown"
evidence = "conncache: include the zone id in the \"bundle\" hashkey"
[[pair]]
name = "curl-cve-2022-22576-conn_free"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2022-22576"
cwe = "CWE-119"
commit = "852aa5ad351ea53e5f01d2f44b5b4370c2bf5425"
parent = "ff2f3e836702daa82e2356195482fcc95f4257dc"
commit_url = "https://github.com/curl/curl/commit/852aa5ad351ea53e5f01d2f44b5b4370c2bf5425"
vuln = "curl-cve-2022-22576-conn_free/vuln.c"
fixed = "curl-cve-2022-22576-conn_free/fixed.c"
relpath = "lib/url.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2022"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "lib/url.c"
function = "conn_free"
mechanism = "other"
sink = "unknown"
evidence = "url: check sasl additional parameters for connection reuse."
[[pair]]
name = "curl-cve-2021-22947"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2021-22947"
cwe = "CWE-119"
commit = "8ef147c43646e91fdaad5d0e7b60351f842e5c68"
parent = "364f174724ef115c63d5e5dc1d3342c8a43b1cca"
commit_url = "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68"
vuln = "curl-cve-2021-22947/vuln.c"
fixed = "curl-cve-2021-22947/fixed.c"
relpath = "lib/ftp.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "lib/ftp.c"
function = "ftp_statemachine"
mechanism = "other"
sink = "unknown"
evidence = "ftp,imap,pop3,smtp: reject STARTTLS server response pipelining"
[[pair]]
name = "curl-cve-2021-22947-imap_state_starttls_resp"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2021-22947"
cwe = "CWE-119"
commit = "8ef147c43646e91fdaad5d0e7b60351f842e5c68"
parent = "364f174724ef115c63d5e5dc1d3342c8a43b1cca"
commit_url = "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68"
vuln = "curl-cve-2021-22947-imap_state_starttls_resp/vuln.c"
fixed = "curl-cve-2021-22947-imap_state_starttls_resp/fixed.c"
relpath = "lib/imap.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "lib/imap.c"
function = "imap_state_starttls_resp"
mechanism = "other"
sink = "unknown"
evidence = "ftp,imap,pop3,smtp: reject STARTTLS server response pipelining"
[[pair]]
name = "curl-cve-2021-22947-pop3_state_starttls_resp"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2021-22947"
cwe = "CWE-119"
commit = "8ef147c43646e91fdaad5d0e7b60351f842e5c68"
parent = "364f174724ef115c63d5e5dc1d3342c8a43b1cca"
commit_url = "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68"
vuln = "curl-cve-2021-22947-pop3_state_starttls_resp/vuln.c"
fixed = "curl-cve-2021-22947-pop3_state_starttls_resp/fixed.c"
relpath = "lib/pop3.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "lib/pop3.c"
function = "pop3_state_starttls_resp"
mechanism = "other"
sink = "unknown"
evidence = "ftp,imap,pop3,smtp: reject STARTTLS server response pipelining"
[[pair]]
name = "curl-cve-2021-22947-smtp_state_starttls_resp"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2021-22947"
cwe = "CWE-119"
commit = "8ef147c43646e91fdaad5d0e7b60351f842e5c68"
parent = "364f174724ef115c63d5e5dc1d3342c8a43b1cca"
commit_url = "https://github.com/curl/curl/commit/8ef147c43646e91fdaad5d0e7b60351f842e5c68"
vuln = "curl-cve-2021-22947-smtp_state_starttls_resp/vuln.c"
fixed = "curl-cve-2021-22947-smtp_state_starttls_resp/fixed.c"
relpath = "lib/smtp.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "lib/smtp.c"
function = "smtp_state_starttls_resp"
mechanism = "other"
sink = "unknown"
evidence = "ftp,imap,pop3,smtp: reject STARTTLS server response pipelining"
[[pair]]
name = "curl-cve-2021-22946"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2021-22946"
cwe = "CWE-119"
commit = "364f174724ef115c63d5e5dc1d3342c8a43b1cca"
parent = "43157490a5054bd24256fe12876931e8abc9df49"
commit_url = "https://github.com/curl/curl/commit/364f174724ef115c63d5e5dc1d3342c8a43b1cca"
vuln = "curl-cve-2021-22946/vuln.c"
fixed = "curl-cve-2021-22946/fixed.c"
relpath = "lib/ftp.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "lib/ftp.c"
function = "ftp_statemachine"
mechanism = "other"
sink = "unknown"
evidence = "ftp,imap,pop3: do not ignore --ssl-reqd"
[[pair]]
name = "curl-cve-2021-22946-imap_state_capability_re"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2021-22946"
cwe = "CWE-119"
commit = "364f174724ef115c63d5e5dc1d3342c8a43b1cca"
parent = "43157490a5054bd24256fe12876931e8abc9df49"
commit_url = "https://github.com/curl/curl/commit/364f174724ef115c63d5e5dc1d3342c8a43b1cca"
vuln = "curl-cve-2021-22946-imap_state_capability_re/vuln.c"
fixed = "curl-cve-2021-22946-imap_state_capability_re/fixed.c"
relpath = "lib/imap.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "lib/imap.c"
function = "imap_state_capability_resp"
mechanism = "other"
sink = "unknown"
evidence = "ftp,imap,pop3: do not ignore --ssl-reqd"
[[pair]]
name = "curl-cve-2021-22946-pop3_state_capa_resp"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2021-22946"
cwe = "CWE-119"
commit = "364f174724ef115c63d5e5dc1d3342c8a43b1cca"
parent = "43157490a5054bd24256fe12876931e8abc9df49"
commit_url = "https://github.com/curl/curl/commit/364f174724ef115c63d5e5dc1d3342c8a43b1cca"
vuln = "curl-cve-2021-22946-pop3_state_capa_resp/vuln.c"
fixed = "curl-cve-2021-22946-pop3_state_capa_resp/fixed.c"
relpath = "lib/pop3.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "lib/pop3.c"
function = "pop3_state_capa_resp"
mechanism = "other"
sink = "unknown"
evidence = "ftp,imap,pop3: do not ignore --ssl-reqd"
[[pair]]
name = "curl-cve-2021-22945"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2021-22945"
cwe = "CWE-119"
commit = "43157490a5054bd24256fe12876931e8abc9df49"
parent = "409a4412409371db00af0a3fe987e517bfab3d19"
commit_url = "https://github.com/curl/curl/commit/43157490a5054bd24256fe12876931e8abc9df49"
vuln = "curl-cve-2021-22945/vuln.c"
fixed = "curl-cve-2021-22945/fixed.c"
relpath = "lib/mqtt.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "lib/mqtt.c"
function = "mqtt_send"
mechanism = "other"
sink = "unknown"
evidence = "mqtt: clear the leftovers pointer when sending succeeds"
[[pair]]
name = "curl-cve-2021-22924"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2021-22924"
cwe = "CWE-119"
commit = "5ea3145850ebff1dc2b13d17440300a01ca38161"
parent = "fd9b40bf8dfd43edcbc0d254d613d95a11061c05"
commit_url = "https://github.com/curl/curl/commit/5ea3145850ebff1dc2b13d17440300a01ca38161"
vuln = "curl-cve-2021-22924/vuln.c"
fixed = "curl-cve-2021-22924/fixed.c"
relpath = "lib/url.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "lib/url.c"
function = "create_conn"
mechanism = "other"
sink = "unknown"
evidence = "vtls: fix connection reuse checks for issuer cert and case sensitivity"
[[pair]]
name = "curl-cve-2021-22924-nss_do_connect"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2021-22924"
cwe = "CWE-119"
commit = "5ea3145850ebff1dc2b13d17440300a01ca38161"
parent = "fd9b40bf8dfd43edcbc0d254d613d95a11061c05"
commit_url = "https://github.com/curl/curl/commit/5ea3145850ebff1dc2b13d17440300a01ca38161"
vuln = "curl-cve-2021-22924-nss_do_connect/vuln.c"
fixed = "curl-cve-2021-22924-nss_do_connect/fixed.c"
relpath = "lib/vtls/nss.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "lib/vtls/nss.c"
function = "nss_do_connect"
mechanism = "other"
sink = "unknown"
evidence = "vtls: fix connection reuse checks for issuer cert and case sensitivity"
[[pair]]
name = "curl-cve-2021-22924-servercert"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2021-22924"
cwe = "CWE-119"
commit = "5ea3145850ebff1dc2b13d17440300a01ca38161"
parent = "fd9b40bf8dfd43edcbc0d254d613d95a11061c05"
commit_url = "https://github.com/curl/curl/commit/5ea3145850ebff1dc2b13d17440300a01ca38161"
vuln = "curl-cve-2021-22924-servercert/vuln.c"
fixed = "curl-cve-2021-22924-servercert/fixed.c"
relpath = "lib/vtls/openssl.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "lib/vtls/openssl.c"
function = "servercert"
mechanism = "other"
sink = "unknown"
evidence = "vtls: fix connection reuse checks for issuer cert and case sensitivity"
[[pair]]
name = "curl-cve-2021-22925"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2021-22925"
cwe = "CWE-119"
commit = "894f6ec730597eb243618d33cc84d71add8d6a8a"
parent = "12284e008bad5156b67d0ac253331a96d77201d1"
commit_url = "https://github.com/curl/curl/commit/894f6ec730597eb243618d33cc84d71add8d6a8a"
vuln = "curl-cve-2021-22925/vuln.c"
fixed = "curl-cve-2021-22925/fixed.c"
relpath = "lib/telnet.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "lib/telnet.c"
function = "suboption"
mechanism = "other"
sink = "unknown"
evidence = "telnet: fix option parser to not send uninitialized contents"
[[pair]]
name = "curl-cve-2021-22901-ossl_connect_step1"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2021-22901"
cwe = "CWE-119"
commit = "7f4a9a9b2a49547eae24d2e19bc5c346e9026479"
parent = "39ce47f219b09c380b81f89fe54ac586c8db6bde"
commit_url = "https://github.com/curl/curl/commit/7f4a9a9b2a49547eae24d2e19bc5c346e9026479"
vuln = "curl-cve-2021-22901-ossl_connect_step1/vuln.c"
fixed = "curl-cve-2021-22901-ossl_connect_step1/fixed.c"
relpath = "lib/vtls/openssl.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "lib/vtls/openssl.c"
function = "ossl_connect_step1"
mechanism = "other"
sink = "unknown"
evidence = "openssl: associate/detach the transfer from connection"
[[pair]]
name = "curl-cve-2021-22898"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2021-22898"
cwe = "CWE-119"
commit = "39ce47f219b09c380b81f89fe54ac586c8db6bde"
parent = "bbb71507b7bab52002f9b1e0880bed6a32834511"
commit_url = "https://github.com/curl/curl/commit/39ce47f219b09c380b81f89fe54ac586c8db6bde"
vuln = "curl-cve-2021-22898/vuln.c"
fixed = "curl-cve-2021-22898/fixed.c"
relpath = "lib/telnet.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "lib/telnet.c"
function = "suboption"
mechanism = "other"
sink = "unknown"
evidence = "telnet: check sscanf() for correct number of matches"
[[pair]]
name = "curl-cve-2021-22890"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2021-22890"
cwe = "CWE-119"
commit = "b09c8ee15771c614c4bf3ddac893cdb12187c844"
parent = "7214288898f5625a6cc196e22a74232eada7861c"
commit_url = "https://github.com/curl/curl/commit/b09c8ee15771c614c4bf3ddac893cdb12187c844"
vuln = "curl-cve-2021-22890/vuln.c"
fixed = "curl-cve-2021-22890/fixed.c"
relpath = "lib/vtls/bearssl.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "lib/vtls/bearssl.c"
function = "bearssl_connect_step1"
mechanism = "other"
sink = "unknown"
evidence = "vtls: add 'isproxy' argument to Curl_ssl_get/addsessionid()"
[[pair]]
name = "curl-cve-2021-22876"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2021-22876"
cwe = "CWE-119"
commit = "7214288898f5625a6cc196e22a74232eada7861c"
parent = "184ffc0bdfcab17eb96d1dd64f9c0cecc139e3e9"
commit_url = "https://github.com/curl/curl/commit/7214288898f5625a6cc196e22a74232eada7861c"
vuln = "curl-cve-2021-22876/vuln.c"
fixed = "curl-cve-2021-22876/fixed.c"
relpath = "lib/transfer.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2021"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "lib/transfer.c"
function = "Curl_follow"
mechanism = "other"
sink = "unknown"
evidence = "transfer: strip credentials from the auto-referer header field"
[[pair]]
name = "curl-cve-2020-8286"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2020-8286"
cwe = "CWE-119"
commit = "d9d01672785b8ac04aab1abb6de95fe3072ae199"
parent = "69a358f2186e04cf44698b5100332cbf1ee7f01d"
commit_url = "https://github.com/curl/curl/commit/d9d01672785b8ac04aab1abb6de95fe3072ae199"
vuln = "curl-cve-2020-8286/vuln.c"
fixed = "curl-cve-2020-8286/fixed.c"
relpath = "lib/vtls/openssl.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2020"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "lib/vtls/openssl.c"
function = "verifystatus"
mechanism = "other"
sink = "unknown"
evidence = "openssl: make the OCSP verification verify the certificate id"
[[pair]]
name = "curl-cve-2020-8284"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2020-8284"
cwe = "CWE-119"
commit = "ec9cc725d598ac77de7b6df8afeec292b3c8ad46"
parent = "abd846c374c5269809ce11740754bc6f00a0b193"
commit_url = "https://github.com/curl/curl/commit/ec9cc725d598ac77de7b6df8afeec292b3c8ad46"
vuln = "curl-cve-2020-8284/vuln.c"
fixed = "curl-cve-2020-8284/fixed.c"
relpath = "lib/url.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2020"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "lib/url.c"
function = "Curl_init_userdefined"
mechanism = "other"
sink = "unknown"
evidence = "ftp: CURLOPT_FTP_SKIP_PASV_IP by default"
[[pair]]
name = "curl-cve-2020-8284-config_init"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2020-8284"
cwe = "CWE-119"
commit = "ec9cc725d598ac77de7b6df8afeec292b3c8ad46"
parent = "abd846c374c5269809ce11740754bc6f00a0b193"
commit_url = "https://github.com/curl/curl/commit/ec9cc725d598ac77de7b6df8afeec292b3c8ad46"
vuln = "curl-cve-2020-8284-config_init/vuln.c"
fixed = "curl-cve-2020-8284-config_init/fixed.c"
relpath = "src/tool_cfgable.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2020"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "src/tool_cfgable.c"
function = "config_init"
mechanism = "other"
sink = "unknown"
evidence = "ftp: CURLOPT_FTP_SKIP_PASV_IP by default"
[[pair]]
name = "curl-cve-2020-8231-curl_multi_add_handle"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2020-8231"
cwe = "CWE-119"
commit = "3c9e021f86872baae412a427e807fbfa2f3e8a22"
parent = "687908c6e6332b2bf4ba74b271e795f9c65a5a61"
commit_url = "https://github.com/curl/curl/commit/3c9e021f86872baae412a427e807fbfa2f3e8a22"
vuln = "curl-cve-2020-8231-curl_multi_add_handle/vuln.c"
fixed = "curl-cve-2020-8231-curl_multi_add_handle/fixed.c"
relpath = "lib/multi.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "holdout"
review_tier = "advisory"
fix_date = "2020"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "lib/multi.c"
function = "curl_multi_add_handle"
mechanism = "other"
sink = "unknown"
evidence = "Curl_easy: remember last connection by id, not by pointer"
[[pair]]
name = "curl-cve-2020-8231-curl_open"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2020-8231"
cwe = "CWE-119"
commit = "3c9e021f86872baae412a427e807fbfa2f3e8a22"
parent = "687908c6e6332b2bf4ba74b271e795f9c65a5a61"
commit_url = "https://github.com/curl/curl/commit/3c9e021f86872baae412a427e807fbfa2f3e8a22"
vuln = "curl-cve-2020-8231-curl_open/vuln.c"
fixed = "curl-cve-2020-8231-curl_open/fixed.c"
relpath = "lib/url.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2020"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "lib/url.c"
function = "Curl_open"
mechanism = "other"
sink = "unknown"
evidence = "Curl_easy: remember last connection by id, not by pointer"
[[pair]]
name = "curl-cve-2020-8177"
slice = "vfc"
language = "c_cpp"
origin = "curl"
license = "curl"
repo = "curl/curl"
cve = "CVE-2020-8177"
cwe = "CWE-119"
commit = "8236aba58542c5f89f1d41ca09d84579efb05e22"
parent = "26d2755d7c3181e90e46014778941bff53d2309f"
commit_url = "https://github.com/curl/curl/commit/8236aba58542c5f89f1d41ca09d84579efb05e22"
vuln = "curl-cve-2020-8177/vuln.c"
fixed = "curl-cve-2020-8177/fixed.c"
relpath = "src/tool_cb_hdr.c"
min_recall = 1.0
fix_policy = "silent"
provenance = "human"
split = "train"
review_tier = "advisory"
fix_date = "2020"
[[pair.expected]]
cwe = "CWE-119"
class = "security fix"
path = "src/tool_cb_hdr.c"
function = "tool_header_cb"
mechanism = "other"
sink = "unknown"
evidence = "tool_getparam: -i is not OK if -J is used"
Reference in New Issue View Git Blame Copy Permalink