Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-17361

Опубликовано: 12 авг. 2020
Источник: nvd
CVSS3: 5.5
CVSS2: 4.3
EPSS Низкий

Описание

An issue was discovered in ReadyTalk Avian 1.2.0. The vm::arrayCopy method defined in classpath-common.h returns silently when a negative length is provided (instead of throwing an exception). This could result in data being lost during the copy, with varying consequences depending on the subsequent use of the destination buffer. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:readytalk:avian:1.2.0:*:*:*:*:*:*:*

EPSS

Процентиль: 53%
0.00302
Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-755

Связанные уязвимости

CVSS3: 5.5
github
больше 3 лет назад

** UNSUPPORTED WHEN ASSIGNED ** An issue was discovered in ReadyTalk Avian 1.2.0. The vm::arrayCopy method defined in classpath-common.h returns silently when a negative length is provided (instead of throwing an exception). This could result in data being lost during the copy, with varying consequences depending on the subsequent use of the destination buffer. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

EPSS

Процентиль: 53%
0.00302
Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-755