From 03a47e13b4bfc29eeebad414473ec362f272620a Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Mon, 23 Sep 2024 20:49:00 +0000
Subject: [PATCH] Publish GHSA-2wq5-g96f-mv3v

---
 .../GHSA-2wq5-g96f-mv3v.json                  | 61 +++++++++++++++++++
 1 file changed, 61 insertions(+)
 create mode 100644 advisories/github-reviewed/2024/09/GHSA-2wq5-g96f-mv3v/GHSA-2wq5-g96f-mv3v.json

diff --git a/advisories/github-reviewed/2024/09/GHSA-2wq5-g96f-mv3v/GHSA-2wq5-g96f-mv3v.json b/advisories/github-reviewed/2024/09/GHSA-2wq5-g96f-mv3v/GHSA-2wq5-g96f-mv3v.json
new file mode 100644
index 00000000000..34b5b048599
--- /dev/null
+++ b/advisories/github-reviewed/2024/09/GHSA-2wq5-g96f-mv3v/GHSA-2wq5-g96f-mv3v.json
@@ -0,0 +1,61 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2wq5-g96f-mv3v",
+  "modified": "2024-09-23T20:47:27Z",
+  "published": "2024-09-23T20:47:27Z",
+  "aliases": [
+
+  ],
+  "summary": "Ouch! allows a segmentation fault due to use of uninitialized memory",
+  "details": "When trying to decompress a file using \"ouch\", we can reach the function \"ouch::archive::zip::convert_zip_date_time\". In the function, there is a unsafe function, \"transmute\". Once the \"transmute\" function is called to convert the type of \"month\" object, the address of the object is changed to the uninitialized memory region. After that, when other function tries to dereference \"month\", segmentation fault occurs.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "crates.io",
+        "name": "ouch"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "0.3.1"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://github.com/ouch-org/ouch/issues/707"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/ouch-org/ouch"
+    },
+    {
+      "type": "WEB",
+      "url": "https://rustsec.org/advisories/RUSTSEC-2024-0374.html"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-09-23T20:47:27Z",
+    "nvd_published_at": null
+  }
+}
\ No newline at end of file