ISOMAN

CVE

CVE-2020-6514

Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to potentially exploit heap corruption via a crafted SCTP stream.

Severity
MEDIUM
CVSS
6.5
Published
Modified

Linked Releases

References

  1. http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00069.html
  2. http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00007.html
  3. http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00008.html
  4. http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00011.html
  5. http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00018.html
  6. http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00022.html
  7. http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html
  8. http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00032.html
  9. http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00041.html
  10. http://packetstormsecurity.com/files/158697/WebRTC-usrsctp-Incorrect-Call.html
  11. https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html
  12. https://crbug.com/1076703
  13. https://lists.debian.org/debian-lts-announce/2020/07/msg00027.html
  14. https://lists.debian.org/debian-lts-announce/2020/08/msg00006.html
  15. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MTRPPTKZ2RKVH2XGQCWNFZ7FOGQ5LLCA/
  16. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MYIDWCHG24ZTFD4P42D4A4WWPPA74BCG/
  17. https://security.gentoo.org/glsa/202007-08
  18. https://security.gentoo.org/glsa/202007-64
  19. https://security.gentoo.org/glsa/202101-30
  20. https://support.apple.com/kb/HT211288