CVE-2020-8229

A memory leak in the OCUtil.dll library used by Nextcloud Desktop Client 2.6.4 can lead to a DoS against the host system.
References
Link Resource
https://hackerone.com/reports/588562 Exploit Third Party Advisory
https://nextcloud.com/security/advisory/?id=NC-SA-2020-034 Broken Link Vendor Advisory
https://hackerone.com/reports/588562 Exploit Third Party Advisory
https://nextcloud.com/security/advisory/?id=NC-SA-2020-034 Broken Link Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:nextcloud:desktop:*:*:*:*:*:*:*:*

History

21 Nov 2024, 05:38

Type Values Removed Values Added
References () https://hackerone.com/reports/588562 - Exploit, Third Party Advisory () https://hackerone.com/reports/588562 - Exploit, Third Party Advisory
References () https://nextcloud.com/security/advisory/?id=NC-SA-2020-034 - Broken Link, Vendor Advisory () https://nextcloud.com/security/advisory/?id=NC-SA-2020-034 - Broken Link, Vendor Advisory

Information

Published : 2020-08-10 14:15

Updated : 2024-11-21 05:38


NVD link : CVE-2020-8229

Mitre link : CVE-2020-8229

CVE.ORG link : CVE-2020-8229


JSON object : View

Products Affected

nextcloud

  • desktop
CWE
CWE-400

Uncontrolled Resource Consumption

CWE-401

Missing Release of Memory after Effective Lifetime