CVE-2020-8927

🗓️ 15 Sep 2020 09:15:12Reported by Debian Security Bug TrackerType

A buffer overflow exists in the Brotli library versions prior to 1.0.8 due to input length control, requiring library update or chunk size limit

Reporter	Title	Published	Views	Family All 205
altlinux	Security fix for the ALT Linux 10 package dotnet-bootstrap-5.0 version 5.0.15-alt1	2 Apr 202200:00	–	altlinux
altlinux	Security fix for the ALT Linux 10 package dotnet-runtime-5.0 version 5.0.15-alt1	2 Apr 202200:00	–	altlinux
altlinux	Security fix for the ALT Linux 10 package dotnet-bootstrap-3.1 version 3.1.23-alt1	2 Apr 202200:00	–	altlinux
altlinux	Security fix for the ALT Linux 10 package dotnet-coreclr-3.1 version 3.1.23-alt1	2 Apr 202200:00	–	altlinux
ibm	Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to several CVEs	19 Oct 202115:38	–	ibm
ibm	Security Bulletin: Multiple Security Vulnerabilities fixed in IBM Security Verify Access	7 Jan 202200:24	–	ibm
ibm	Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities	3 Dec 202118:52	–	ibm
ibm	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	20 Aug 202218:29	–	ibm
nessus	Alibaba Cloud Linux 3 : 0118: brotli (ALINUX3-SA-2022:0118)	14 May 202500:00	–	nessus
nessus	AlmaLinux 8 : brotli (ALSA-2021:1702)	9 Feb 202200:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	11	any	brotli	1.0.9-1	brotli_1.0.9-1_any.deb
Debian	12	any	brotli	1.0.9-1	brotli_1.0.9-1_any.deb
Debian	13	any	brotli	1.0.9-1	brotli_1.0.9-1_any.deb
Debian	14	any	brotli	1.0.9-1	brotli_1.0.9-1_any.deb
Debian	999	any	brotli	1.0.9-1	brotli_1.0.9-1_any.deb

15 Sep 2020 09:15Current

7.5High risk

Vulners AI Score7.5

CVSS 26.4

CVSS 3.15.3 - 6.5

EPSS0.03217

SSVC