CVE-2020-17361

An issue was discovered in ReadyTalk Avian 1.2.0. The vm::arrayCopy method defined in classpath-common.h returns silently when a negative length is provided (instead of throwing an exception). This could result in data being lost during the copy, with varying consequences depending on the subsequent use of the destination buffer. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

• CWE-755

• http://seclists.org/fulldisclosure/2020/Aug/10Exploit, Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2020/Sep/11Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2020/Sep/13Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2020/Sep/14Mailing List, Third Party Advisory
• https://github.com/ReadyTalk/avian/issuesThird Party Advisory
• http://seclists.org/fulldisclosure/2020/Aug/10Exploit, Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2020/Sep/11Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2020/Sep/13Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2020/Sep/14Mailing List, Third Party Advisory
• https://github.com/ReadyTalk/avian/issuesThird Party Advisory

Published

Aug 12, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-17352Two OS command injection vulnerabilities in the User Portal …8.8
• CVE-2020-17353scm/define-stencil-commands.scm in LilyPond through 2.20.0, …9.8
• CVE-2020-17354LilyPond before 2.24 allows attackers to bypass the -dsafe p…8.6
• CVE-2020-17355Arista EOS before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x be…7.5
• CVE-2020-1736A flaw was found in Ansible Engine when a file is moved usin…3.3
• CVE-2020-17360An issue was discovered in ReadyTalk Avian 1.2.0. The vm::ar…7.8
• CVE-2020-17362search.php in the Nova Lite theme before 1.3.9 for WordPress…6.1
• CVE-2020-17363USVN (aka User-friendly SVN) before 1.0.9 allows remote code…9.9
• CVE-2020-17364USVN (aka User-friendly SVN) before 1.0.9 allows XSS via SVN…6.1
• CVE-2020-17365Improper directory permissions in the Hotspot Shield VPN cli…7.8
• CVE-2020-17366An issue was discovered in NLnet Labs Routinator 0.1.0 throu…7.4
• CVE-2020-17367Firejail through 0.9.62 does not honor the -- end-of-options…7.8