Vulnerability Description
CiphertextHeader.java in Cryptacular 1.2.3, as used in Apereo CAS and other products, allows attackers to trigger excessive memory allocation during a decode operation, because the nonce array length associated with "new byte" may depend on untrusted input within the header of encoded data.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Vt | Cryptacular | < 1.1.4 |
| Oracle | Communications Services Gatekeeper | 7.0 |
| Oracle | Webcenter Sites | 12.2.1.3.0 |
| Oracle | Weblogic Server | 12.2.1.4.0 |
Related Weaknesses (CWE)
References
- https://github.com/apereo/cas/commit/8810f2b6c71d73341d4dde6b09a18eb46cfd6d45PatchThird Party Advisory
- https://github.com/apereo/cas/commit/93b1c3e9d90e36a19d0fa0f6efb863c6f0235e75PatchThird Party Advisory
- https://github.com/apereo/cas/commit/a042808d6adbbf44753d52c55cac5f533e24101fPatchThird Party Advisory
- https://github.com/apereo/cas/pull/4685PatchThird Party Advisory
- https://github.com/vt-middleware/cryptacular/blob/fafccd07ab1214e3588a35afe3c361ExploitThird Party Advisory
- https://github.com/vt-middleware/cryptacular/blob/master/src/main/java/org/cryptExploitThird Party Advisory
- https://github.com/vt-middleware/cryptacular/issues/52ExploitThird Party Advisory
- https://lists.apache.org/thread.html/r0847c7eb78c8f9e87d5b841fbd5da52b2ad4b4345e
- https://lists.apache.org/thread.html/r209de85beae4d257d27fc577e3a3e97039bdb4c2dc
- https://lists.apache.org/thread.html/r2237a27040b57adc2fcc5570bd530ad2038e67fcb2
- https://lists.apache.org/thread.html/r380781f5b489cb3c818536cd3b3757e806bfe0bca1
- https://lists.apache.org/thread.html/r4a62133ad01d5f963755021027a4cce23f76b8674a
- https://lists.apache.org/thread.html/r77c48cd851f60833df9a9c9c31f12243508e15d1b2
- https://lists.apache.org/thread.html/rc36b75cabb4d700b48035d15ad8b8c2712bb321235
- https://lists.apache.org/thread.html/re04e4f8f0d095387fb6b0ff9016a0af8c93f42e1de
FAQ
What is CVE-2020-7226?
CVE-2020-7226 is a vulnerability with a CVSS score of 7.5 (HIGH). CiphertextHeader.java in Cryptacular 1.2.3, as used in Apereo CAS and other products, allows attackers to trigger excessive memory allocation during a decode operation, because the nonce array length ...
How severe is CVE-2020-7226?
CVE-2020-7226 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-7226?
Check the references section above for vendor advisories and patch information. Affected products include: Vt Cryptacular, Oracle Communications Services Gatekeeper, Oracle Webcenter Sites, Oracle Weblogic Server.