Published: 12/08/2020 Updated: 11/04/2024

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

An issue exists in ReadyTalk Avian 1.2.0. The vm::arrayCopy method defined in classpath-common.h returns silently when a negative length is provided (instead of throwing an exception). This could result in data being lost during the copy, with varying consequences depending on the subsequent use of the destination buffer. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

Vulnerable Product	Search on Vulmon	Subscribe to Product
readytalk avian 1.2.0

Noise-Java suffers from an issue located in the AESGCMFallbackCipherStateencryptWithAd() method defined in AESGCMFallbackCipherStatejava, where multiple boundary checks are performed to prevent invalid length or offsets from being specified for the encrypt or copy operation However, some checks were found to be either incomplete or missing ...

Avian JVM version 120 suffers from a silent return issue in the vm::arrayCopy method defined in classpath-commonh, where multiple boundary checks are performed to prevent out-of-bounds memory read/write One of these boundary checks makes the code return silently when a negative length is provided instead of throwing an exception ...

Noise-Java suffers from an issue located in the AESGCMOnCtrCipherStateencryptWithAd() method defined in AESGCMOnCtrCipherStatejava, where multiple boundary checks are performed to prevent invalid length or offsets from being specified for the encrypt or copy operation However, some checks were found to be either incomplete or missing ...

Noise-Java suffers from an issue located in the ChaChaPolyCipherStateencryptWithAd() method defined in ChaChaPolyCipherStatejava, where multiple boundary checks are performed to prevent invalid length or offsets from being specified for the encrypt or copy operation However, some checks were found to be either incomplete or missing ...

Full Disclosure mailing list archives   By Date By Thread </form>    Avian JVM vm::arrayCopy() silent return on negative length   From ...

Full Disclosure mailing list archives   By Date By Thread </form>    Noise-Java AESGCMOnCtrCipherStateencryptWithAd() insufficient boundary checks  <!--X-Head- ...

CWE-755 https://github.com/ReadyTalk/avian/issues http://seclists.org/fulldisclosure/2020/Aug/10 http://seclists.org/fulldisclosure/2020/Sep/11 http://seclists.org/fulldisclosure/2020/Sep/14 http://seclists.org/fulldisclosure/2020/Sep/13 https://nvd.nist.gov http://seclists.org/fulldisclosure/2020/Aug/10

CVE-2020-17361

Vulnerability Summary

Vulnerability Trend

Exploits

Mailing Lists

References

Vulmon Search

About

Products

Connect