Vulnerability · Published Aug 12, 2020 · Assigned by mitre

CVE-2020-17360

High 7.8

In plain English

A high-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 67% of all known vulnerabilities).

Severity (CVSS NVD)7.8High

Exploit odds (30 days)1.2%top 32.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

An issue was discovered in ReadyTalk Avian 1.2.0. The vm::arrayCopy method defined in classpath-common.h contains multiple boundary checks that are performed to prevent out-of-bounds memory read/write. However, two of these boundary checks contain an integer overflow that leads to a bypass of these checks, and out-of-bounds read/write. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/ReadyTalk/avian/issues x_refsource_MISC
http://seclists.org/fulldisclosure/2020/Aug/8 x_refsource_MISC
20200904 Noise-Java AESGCMFallbackCipherState.encryptWithAd() insufficient boundary checks mailing-list, x_refsource_FULLDISC
20200904 Noise-Java ChaChaPolyCipherState.encryptWithAd() insufficient boundary checks mailing-list, x_refsource_FULLDISC
20200904 Noise-Java AESGCMOnCtrCipherState.encryptWithAd() insufficient boundary checks mailing-list, x_refsource_FULLDISC