CVE-2020-8230 - A memory corruption vulnerability exists in NextCloud Desktop Client v2.6.4 where missing ASLR and DEP protections in for windows allowed to corrupt memory

Back Back to CVE browser

MEDIUM

A memory corruption vulnerability exists in NextCloud Desktop Client v2.6.4 where missing ASLR and DEP protections in for windows allowed to corrupt memory

Published Aug 17, 2020

5.5

MEDIUM

CVSS 3.1

EPSS 0.35%

Description

A memory corruption vulnerability exists in NextCloud Desktop Client v2.6.4 where missing ASLR and DEP protections in for windows allowed to corrupt memory.

Affected products

Vendor n/a Product Desktop Client Default
n/a
- Version
  2.6.5
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Desktop Client

n/a

Version	Status	Constraints
2.6.5	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-119

Buffer Overflow

CWE-787

Out-of-bounds Write

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29102
Advisory
https://hackerone.com/reports/380102
x_refsource_MISCIssue TrackingPatchThird Party Advisory
https://nextcloud.com/security/advisory/?id=NC-SA-2020-035
x_refsource_MISCBroken LinkVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29102		Advisory
https://hackerone.com/reports/380102		x_refsource_MISCIssue TrackingPatchThird Party Advisory
https://nextcloud.com/security/advisory/?id=NC-SA-2020-035		x_refsource_MISCBroken LinkVendor Advisory