From dc5ced1155c815c54ed52becac6de117df6deb61 Mon Sep 17 00:00:00 2001 From: "Sergey \"Shnatsel\" Davidoff" Date: Tue, 21 Dec 2021 23:26:29 +0100 Subject: [PATCH] CVE-2020-8927 for compu-brotli-sys (#1129) --- crates/compu-brotli-sys/RUSTSEC-0000-0000.md | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) create mode 100644 crates/compu-brotli-sys/RUSTSEC-0000-0000.md diff --git a/crates/compu-brotli-sys/RUSTSEC-0000-0000.md b/crates/compu-brotli-sys/RUSTSEC-0000-0000.md new file mode 100644 index 0000000..de4f9aa --- /dev/null +++ b/crates/compu-brotli-sys/RUSTSEC-0000-0000.md @@ -0,0 +1,20 @@ +```toml +[advisory] +id = "RUSTSEC-0000-0000" +package = "compu-brotli-sys" +date = "2021-12-20" +url = "https://github.com/google/brotli/releases/tag/v1.0.9" +categories = ["memory-corruption"] +keywords = ["integer-overflow"] +aliases = ["CVE-2020-8927"] + +[affected] + +[versions] +patched = [">= 1.0.9"] +``` +# Integer overflow in the bundled Brotli C library + +A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happens when copying over chunks of data larger than 2 GiB. + +If one cannot update the C library, its authors recommend to use the "streaming" API as opposed to the "one-shot" API, and impose chunk size limits.