CVE-2020-8927 Buffer overflow in Brotli library
An attacker can cause a denial of service by triggering a buffer overflow in the Brotli library during one-shot decompression of large data chunks.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-8927?
CVE-2020-8927 is a medium-severity memory corruption vulnerability in Canonical Ubuntu Linux, published on 15 Sep 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or later. If one cannot update, we recommend to use the "streaming" API as opposed to the "one-shot" API, and impose chunk size limits.
Which versions are affected by CVE-2020-8927?
It affects 10 products.
Linux distribution packages (31)
brotli AlmaLinux:8 | All versions | 1.0.6-3.el8 |
brotli-devel AlmaLinux:8 | All versions | 1.0.6-3.el8 |
python3-brotli AlmaLinux:8 | All versions | 1.0.6-3.el8 |
brotli-debuginfo Red Hat:enterprise_linux:8::appstream | All versions | 0:1.0.6-3.el8 |
brotli-debugsource Red Hat:enterprise_linux:8::appstream | All versions | 0:1.0.6-3.el8 |
brotli-devel Red Hat:enterprise_linux:8::appstream | All versions | 0:1.0.6-3.el8 |
python3-brotli Red Hat:enterprise_linux:8::appstream | All versions | 0:1.0.6-3.el8 |
python3-brotli-debuginfo Red Hat:enterprise_linux:8::appstream | All versions | 0:1.0.6-3.el8 |
brotli Red Hat:enterprise_linux:8::baseos | All versions | 0:1.0.6-3.el8 |
brotli-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:1.0.6-3.el8 |
brotli-debugsource Red Hat:enterprise_linux:8::baseos | All versions | 0:1.0.6-3.el8 |
python3-brotli-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:1.0.6-3.el8 |
brotli Rocky Linux:8 | All versions | 0:1.0.6-3.el8 |
brotli SUSE:Linux Enterprise Micro 5.1 | All versions | 1.0.7-3.3.1 |
brotli SUSE:Linux Enterprise Module for Basesystem 15 SP2 | All versions | 1.0.7-3.3.1 |
brotli SUSE:Linux Enterprise Module for Basesystem 15 SP3 | All versions | 1.0.7-3.3.1 |
python-brotlipy SUSE:Linux Enterprise Module for Public Cloud 12 | All versions | 0.6.0-2.6.1 |
python-brotlipy SUSE:Linux Enterprise Module for Public Cloud 15 SP1 | All versions | 0.7.0-150100.3.6.1 |
python-brotlipy SUSE:Linux Enterprise Module for Public Cloud 15 SP2 | All versions | 0.7.0-150100.3.6.1 |
python-brotlipy SUSE:Linux Enterprise Module for Public Cloud 15 SP3 | All versions | 0.7.0-150300.3.3.1 |
python-brotlipy SUSE:Linux Enterprise Module for Public Cloud 15 SP4 | All versions | 0.7.0-150300.3.3.1 |
python-brotlipy SUSE:Linux Enterprise Module for Public Cloud 15 SP5 | All versions | 0.7.0-150300.3.3.1 |
python-Brotli SUSE:Linux Enterprise Module for Python 3 15 SP6 | All versions | 1.0.7-150200.3.3.1 |
python-Brotli SUSE:Linux Enterprise Module for Server Applications 15 SP5 | All versions | 1.0.7-150200.3.3.1 |
brotli openSUSE:Leap 15.2 | All versions | 1.0.9-lp152.2.3.1 |
brotli openSUSE:Leap 15.3 | All versions | 1.0.7-3.3.1 |
python-brotlipy openSUSE:Leap 15.4 | All versions | 0.7.0-150300.3.3.1 |
python-Brotli openSUSE:Leap 15.5 | All versions | 1.0.7-150200.3.3.1 |
python-brotlipy openSUSE:Leap 15.5 | All versions | 0.7.0-150300.3.3.1 |
cargo-audit-advisory-db openSUSE:Tumbleweed | All versions | 20220105-1.1 |
python-Brotli openSUSE:Tumbleweed | All versions | 1.2.0-1.6 |
Products include Canonical Ubuntu Linux, Debian Debian Linux, Fedoraproject Fedora, Google Brotli, Microsoft .Net, Microsoft .Net Core and 4 more.
How do I fix CVE-2020-8927?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2020-8927 being exploited?
There is no known exploitation of CVE-2020-8927 in the wild and no public exploit code.
Other vulnerabilities in Canonical Ubuntu Linux
Sources
Also known as ALPINE-CVE-2020-8927, ALSA-2021:1702, AZL-6341, CLEANSTART-2024-XN11840, DEBIAN-CVE-2020-8927, DLA-2476-1 and 17 more.