CVE:CVE-2020-8927
CNNVD:CNNVD-202009-910
Google brotli Library是美国谷歌（Google）公司的一种数据压缩算法的扩展库使用 LZ77 算法、赫夫曼编码和二阶上下文建模的现代变体组合来压缩数据，其压缩比可与目前可用的最佳通用压缩方法相媲美。
Google brotli Library 1.0.8之前版本存在缓冲区错误漏洞，攻击者控制脚本的一次性解压缩请求的输入长度可能会触发崩溃。
solution:Upgrade google brotli to a higher version than 1.0.8,and avoid the version (,1.0.8); Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade fedoraproject fedora to a higher version than 31,32,33,34,35,36,and avoid the version 31,32,33,34,35,36; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,20.04,and avoid the version 16.04,18.04,20.04; Upgrade opensuse leap to a higher version than 15.2,and avoid the version 15.2; Upgrade microsoft .net to a higher version than 5.0.14,and avoid the version [5.0,5.0.14]; Upgrade microsoft .net_core to a higher version than 3.1.22,and avoid the version [3.1,3.1.22]; Upgrade microsoft powershell to a higher version than 7.0.9,7.1.6,7.2.2,and avoid the version [7.0,7.0.9),[7.1,7.1.6),[7.2,7.2.2); Upgrade microsoft visual_studio_2019 to a higher version than 16.11,and avoid the version [16.0,16.11]; Upgrade microsoft visual_studio_2022 to a higher version than 17.0.7,17.1,and avoid the version [17.0,17.0.7],17.1