CVE-2020-27813: Integer Overflow or Wraparound

December 2, 2020 (updated February 25, 2021)

An integer overflow vulnerability exists with the length of websocket frames received via a websocket connection. An attacker would use this flaw to cause a denial of service attack on an HTTP Server allowing websocket connections.

References

bugzilla.redhat.com/show_bug.cgi?id=1902111
nvd.nist.gov/vuln/detail/CVE-2020-27813

Code Behaviors & Features

Detect and mitigate CVE-2020-27813 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →