QwikSec

Security Database

CVE

CWE

Training

CVE-2020-17361

Published: Aug 12, 2020

Modified: Aug 4, 2024

PUBLISHED

Description

An issue was discovered in ReadyTalk Avian 1.2.0. The vm::arrayCopy method defined in classpath-common.h returns silently when a negative length is provided (instead of throwing an exception). This could result in data being lost during the copy, with varying consequences depending on the subsequent use of the destination buffer. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://github.com/ReadyTalk/avian/issues

x_refsource_MISC

http://seclists.org/fulldisclosure/2020/Aug/10

x_refsource_MISC

20200904 Noise-Java AESGCMFallbackCipherState.encryptWithAd() insufficient boundary checks

mailing-list

x_refsource_FULLDISC

20200904 Noise-Java ChaChaPolyCipherState.encryptWithAd() insufficient boundary checks

mailing-list

x_refsource_FULLDISC

20200904 Noise-Java AESGCMOnCtrCipherState.encryptWithAd() insufficient boundary checks

mailing-list

x_refsource_FULLDISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.