CVE-2020-8230

A memory corruption vulnerability exists in NextCloud Desktop Client v2.6.4 where missing ASLR and DEP protections in for windows allowed to corrupt memory...

CVE-2020-8230

A memory corruption vulnerability exists in NextCloud Desktop Client v2.6.4 where missing ASLR and DEP protections in for windows allowed to corrupt memory...

CVE-2020-8230

A memory corruption vulnerability exists in NextCloud Desktop Client v2.6.4 where missing ASLR and DEP protections in for windows allowed to corrupt memory...

Memory corruption

A memory corruption vulnerability exists in NextCloud Desktop Client v2.6.4 where missing ASLR and DEP protections in for windows allowed to corrupt memory...

CVE-2020-8230

A memory corruption vulnerability exists in NextCloud Desktop Client v2.6.4 where missing ASLR and DEP protections in for windows allowed to corrupt memory...

CVE-2020-8230

CVE-2020-8230 concerns Nextcloud Desktop Client v2.6.4 on Windows. The linked documents state a memory corruption vulnerability arising from missing ASLR and DEP protections, enabling memory corruption with a local attack surface. Impact noted includes high availability impact per CVSS v3.1; expl...

CVE-2020-8230

A memory corruption vulnerability exists in NextCloud Desktop Client v2.6.4 where missing ASLR and DEP protections in for windows allowed to corrupt memory...

PT-2020-20042 · Nextcloud +1 · Nextcloud Desktop Client +1

Name of the Vulnerable Software and Affected Versions: NextCloud Desktop Client version 2.6.4 Description: A memory corruption issue exists due to missing Address Space Layout Randomization ASLR and Data Execution Prevention DEP protections in the Windows version of the software, allowing memory...

CVE-2020-8224

A code injection in Nextcloud Desktop Client 2.6.4 allowed to load arbitrary code when placing a malicious OpenSSL config into a fixed directory...

CVE-2020-8224

A code injection in Nextcloud Desktop Client 2.6.4 allowed to load arbitrary code when placing a malicious OpenSSL config into a fixed directory...

CVE-2020-8229

A memory leak in the OCUtil.dll library used by Nextcloud Desktop Client 2.6.4 can lead to a DoS against the host system...

CVE-2020-8229

A memory leak in the OCUtil.dll library used by Nextcloud Desktop Client 2.6.4 can lead to a DoS against the host system...

Code injection

A code injection in Nextcloud Desktop Client 2.6.4 allowed to load arbitrary code when placing a malicious OpenSSL config into a fixed directory...

Memory corruption

A memory leak in the OCUtil.dll library used by Nextcloud Desktop Client 2.6.4 can lead to a DoS against the host system...

CVE-2020-8224

CVE-2020-8224 – Nextcloud Desktop Client (Windows) Root cause: The Nextcloud Desktop Client ships a Windows OpenSSL library (libeay32.dll) compiled without a defined openssldir. The library attempts to load c:\usr\local\ssl\openssl.cnf on startup. A low-privilege user can create the directory and...

CVE-2020-8224

A code injection in Nextcloud Desktop Client 2.6.4 allowed to load arbitrary code when placing a malicious OpenSSL config into a fixed directory...

CVE-2020-8224

A code injection in Nextcloud Desktop Client 2.6.4 allowed to load arbitrary code when placing a malicious OpenSSL config into a fixed directory...

CVE-2020-8229

CVE-2020-8229 affects the Nextcloud Desktop Client 2.6.4 via a flaw in the OCUtil.dll that causes a memory leak , resulting in a possible DoS of the host system . The available connected documents corroborate the issue as a memory leak in the OCUtil.dll used by Nextcloud Desktop Client 2.6.4, wit...

CVE-2020-8229

A memory leak in the OCUtil.dll library used by Nextcloud Desktop Client 2.6.4 can lead to a DoS against the host system...

CVE-2020-8229

A memory leak in the OCUtil.dll library used by Nextcloud Desktop Client 2.6.4 can lead to a DoS against the host system...