CVE-2020-6514

Published: Jul 22, 2020Modified: Nov 21, 2024

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to potentially exploit heap corruption via a crafted SCTP stream.

Affected (17)

Products: Google: Chrome · Opensuse: Backports Sle, Leap · Fedoraproject: Fedora · +3 more

Show all products

Google: Chrome · Opensuse: Backports Sle, Leap · Fedoraproject: Fedora · Debian: Debian Linux · Canonical: Ubuntu Linux · Apple: Ipados, Iphone Os, Safari, Tvos, Watchos

1 product

2 products

1 product

1 product

1 product

5 products

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Google Chrome	Before 84.0.4147.89

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Opensuse Backports Sle	Version 15.0 sp1
Opensuse Backports Sle	Version 15.0 sp2
Opensuse Leap	Version 15.1
Opensuse Leap	Version 15.2

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 31
Fedoraproject Fedora	Version 32

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 9.0

Configuration E

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 16.04
Canonical Ubuntu Linux	Version 18.04
Canonical Ubuntu Linux	Version 20.04

Configuration F

5 vulnerable

Vulnerable Software	Affected Versions
Apple Ipados	Before 13.6
Apple Iphone Os	Before 13.6
Apple Safari	Before 13.1.2
Apple Tvos	Before 13.4.8
Apple Watchos	Before 6.2.8

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (54)

http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00069.html

Source: chrome-cve-admin@google.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00007.html

Source: chrome-cve-admin@google.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00008.html

Source: chrome-cve-admin@google.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00011.html

Source: chrome-cve-admin@google.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00018.html

Source: chrome-cve-admin@google.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00022.html

Source: chrome-cve-admin@google.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html

Source: chrome-cve-admin@google.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00032.html

Source: chrome-cve-admin@google.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00041.html

Source: chrome-cve-admin@google.com

Mailing ListThird Party Advisory

http://packetstormsecurity.com/files/158697/WebRTC-usrsctp-Incorrect-Call.html

Source: chrome-cve-admin@google.com

ExploitThird Party AdvisoryVDB Entry

https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html

Source: chrome-cve-admin@google.com

Release NotesVendor Advisory

https://crbug.com/1076703

Source: chrome-cve-admin@google.com

ExploitIssue TrackingVendor Advisory

https://lists.debian.org/debian-lts-announce/2020/07/msg00027.html

Source: chrome-cve-admin@google.com

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2020/08/msg00006.html

Source: chrome-cve-admin@google.com

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MTRPPTKZ2RKVH2XGQCWNFZ7FOGQ5LLCA/

Source: chrome-cve-admin@google.com

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MYIDWCHG24ZTFD4P42D4A4WWPPA74BCG/

Source: chrome-cve-admin@google.com

https://security.gentoo.org/glsa/202007-08

Source: chrome-cve-admin@google.com

Third Party Advisory

https://security.gentoo.org/glsa/202007-64

Source: chrome-cve-admin@google.com

Third Party Advisory

https://security.gentoo.org/glsa/202101-30

Source: chrome-cve-admin@google.com

Third Party Advisory

https://support.apple.com/kb/HT211288

Source: chrome-cve-admin@google.com

Third Party Advisory

https://support.apple.com/kb/HT211290

Source: chrome-cve-admin@google.com

Third Party Advisory

https://support.apple.com/kb/HT211291

Source: chrome-cve-admin@google.com

Third Party Advisory

https://support.apple.com/kb/HT211292

Source: chrome-cve-admin@google.com

Third Party Advisory

https://usn.ubuntu.com/4443-1/

Source: chrome-cve-admin@google.com

Third Party Advisory

https://www.debian.org/security/2020/dsa-4736

Source: chrome-cve-admin@google.com

Third Party Advisory

https://www.debian.org/security/2020/dsa-4740

Source: chrome-cve-admin@google.com

Third Party Advisory

https://www.debian.org/security/2021/dsa-4824

Source: chrome-cve-admin@google.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00069.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00007.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00008.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00011.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00018.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00022.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00032.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00041.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://packetstormsecurity.com/files/158697/WebRTC-usrsctp-Incorrect-Call.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party AdvisoryVDB Entry

https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

https://crbug.com/1076703

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingVendor Advisory

https://lists.debian.org/debian-lts-announce/2020/07/msg00027.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2020/08/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MTRPPTKZ2RKVH2XGQCWNFZ7FOGQ5LLCA/

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MYIDWCHG24ZTFD4P42D4A4WWPPA74BCG/

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.gentoo.org/glsa/202007-08

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://security.gentoo.org/glsa/202007-64

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://security.gentoo.org/glsa/202101-30

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://support.apple.com/kb/HT211288

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://support.apple.com/kb/HT211290

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://support.apple.com/kb/HT211291

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://support.apple.com/kb/HT211292

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://usn.ubuntu.com/4443-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.debian.org/security/2020/dsa-4736

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.debian.org/security/2020/dsa-4740

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.debian.org/security/2021/dsa-4824

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.