PT-2020-16801 · Unknown+1 · Http Server+1

Jason Shepherd · Published 2020-12-02 · Updated 2023-07-06 · CVE-2020-27813

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions HTTP Server (affected versions not specified)

Description The issue is related to an integer overflow vulnerability in the length of websocket frames received via a websocket connection. This flaw can be exploited by an attacker to cause a denial of service attack on an HTTP Server that allows websocket connections. An attacker can craft malicious WebSocket frames that cause an integer overflow in a variable which tracks the number of bytes remaining, potentially causing the server or client to get stuck in a loop attempting to read frames.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Integer Overflow

Resource Exhaustion

Weakness Enumeration

CWE-190

CWE-400

Related Identifiers

CVE-2020-27813

DLA-2520-1

DLA-3420-1

GHSA-3XH2-74W9-5VXM

GHSA-JF24-P9P9-4RJH

GO-2020-0019

RHSA-2021:0833

USN-6208-1

Affected Products

Http Server

Ubuntu

References · 23

• https://osv.dev/vulnerability/GO-2020-0019 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6208-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-27813 · Security Note
• https://osv.dev/vulnerability/CVE-2020-27813 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-27813 · Security Note
• https://osv.dev/vulnerability/USN-6208-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-27813 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-2520-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-27813 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-3xh2-74w9-5vxm · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3420-1 · Vendor Advisory
• https://github.com/gorilla/websocket/security/advisories/GHSA-jf24-p9p9-4rjh · Note
• https://github.com/gorilla/websocket · Note
• https://github.com/gorilla/websocket/pull/537 · Note
• https://github.com/gorilla/websocket/commit/5b740c29263eb386f33f265561c8262522f19d37 · Note