QwikSec

Security Database

CVE

CWE

Training

CVE-2020-14315

Published: Sep 16, 2020

Modified: Aug 4, 2024

PUBLISHED

Description

A memory corruption vulnerability is present in bspatch as shipped in Colin Percival’s bsdiff tools version 4.3. Insufficient checks when handling external inputs allows an attacker to bypass the sanity checks in place and write out of a dynamically allocated buffer boundaries.

Vendor	Product	Versions
n/a	bsdiff	affected `bsdiff 4.3`

Weaknesses (CWE)

References

https://www.openwall.com/lists/oss-security/2020/07/09/2

x_refsource_MISC

https://www.x41-dsec.de/lab/advisories/x41-2020-006-bspatch/

x_refsource_MISC

https://bugzilla.redhat.com/show_bug.cgi?id=1856747

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.