CVE-2020-14315

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A memory corruption vulnerability is present in bspatch as shipped in Colin Percival’s bsdiff tools version 4.3. Insufficient checks when handling external inputs allows an attacker to bypass the sanity checks in place and write out of a dynamically allocated buffer boundaries.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
n/a	bsdiff	bsdiff 4.3

References

https://bugzilla.redhat.com/show_bug.cgi?id=1856747Issue Tracking, Third Party Advisory
https://www.openwall.com/lists/oss-security/2020/07/09/2Mailing List, Third Party Advisory
https://www.x41-dsec.de/lab/advisories/x41-2020-006-bspatch/Exploit, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1856747Issue Tracking, Third Party Advisory
https://www.openwall.com/lists/oss-security/2020/07/09/2Mailing List, Third Party Advisory
https://www.x41-dsec.de/lab/advisories/x41-2020-006-bspatch/Exploit, Third Party Advisory

Timeline

Published: Sep 16, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-143169.9A flaw was found in kubevirt 0.29 and earlier. Virtual Machine Instances (VMIs) can be used to gain access to the host's filesystem. Success CVE-2020-143175.5It was found that the issue for security flaw CVE-2019-3805 appeared again in a further version of JBoss Enterprise Application Platform - C CVE-2020-143184.3A flaw was found in the way samba handled file and directory permissions. An authenticated user could use this flaw to gain access to certai CVE-2020-143195.9It was found that the AMQ Online console is vulnerable to a Cross-Site Request Forgery (CSRF) which is exploitable in cases where preflight CVE-2020-14324.3An information disclosure vulnerability exists when Skype for Business is accessed via Internet Explorer, aka 'Skype for Business via Intern CVE-2020-143206.1In Moodle before 3.9.1, 3.8.4 and 3.7.7, the filter in the admin task log required extra sanitizing to prevent a reflected XSS risk.CVE-2020-143218.8In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, teachers of a course were able to assign themselves the manager role within that course.CVE-2020-143227.5In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, yui_combo needed to limit the amount of files it can load to help mitigate the risk of deni CVE-2020-143235.5A null pointer dereference flaw was found in samba's Winbind service in versions before 4.11.15, before 4.12.9 and before 4.13.1. A local us CVE-2020-143249.1A high severity vulnerability was found in all active versions of Red Hat CloudForms before 5.11.7.0. The out of band OS command injection v CVE-2020-143259.1Red Hat CloudForms before 5.11.7.0 was vulnerable to the User Impersonation authorization flaw which allows malicious attacker to create exi CVE-2020-143267.5A vulnerability was found in RESTEasy, where RootNode incorrectly caches routes. This issue results in hash flooding, leading to slower requ