CVE-2013-6631
published 2013-11-19CVE-2013-6631: Use-after-free vulnerability in the Channel::SendRTCPPacket function in voice_engine/channel.cc in libjingle in WebRTC, as used in Google Chrome before…
PriorityP431high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
1.61%
73.6th percentile
Use-after-free vulnerability in the Channel::SendRTCPPacket function in voice_engine/channel.cc in libjingle in WebRTC, as used in Google Chrome before 31.0.1650.48 and other products, allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via vectors that trigger the absence of certain statistics initialization, leading to the skipping of a required DeRegisterExternalTransport call.
Affected
44 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| chrome | <= 31.0.1650.47 | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2013-6631 libjingle: use-after-free flaw [fedora-all]
bugzilla·2013-11-18·CVSS 7.5
CVE-2013-6631 [HIGH] CVE-2013-6631 libjingle: use-after-free flaw [fedora-all]
CVE-2013-6631 libjingle: use-after-free flaw [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please use the bodhi submission link
noted in the next comment(s). This will include the bug IDs of this
tracking bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.
Please note: this issue affects multiple suppor
Bugzilla
CVE-2013-6631 libjingle: use-after-free flaw
bugzilla·2013-11-18·CVSS 7.5
CVE-2013-6631 [HIGH] CVE-2013-6631 libjingle: use-after-free flaw
CVE-2013-6631 libjingle: use-after-free flaw
Common Vulnerabilities and Exposures assigned an identifier CVE-2013-6631 to
the following vulnerability:
Name: CVE-2013-6631
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6631
Assigned: 20131105
Reference: http://googlechromereleases.blogspot.com/2013/11/stable-channel-update.html
Reference: https://code.google.com/p/chromium/issues/detail?id=296804
Reference: https://code.google.com/p/webrtc/source/detail?r=4827
Reference: https://webrtc-codereview.appspot.com/2275008
Use-after-free vulnerability in the Channel::SendRTCPPacket function
in voice_engine/channel.cc in libjingle in WebRTC, as used in Google
Chrome before 31.0.1650.48 and other products, allows remote attackers
to cause a denial of service (heap memory corruption)
http://googlechromereleases.blogspot.com/2013/11/stable-channel-update.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-11/msg00025.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-11/msg00026.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.htmlhttp://lists.opensuse.org/opensuse-updates/2014-01/msg00042.htmlhttp://www.debian.org/security/2013/dsa-2799https://code.google.com/p/chromium/issues/detail?id=296804https://code.google.com/p/webrtc/source/detail?r=4827https://webrtc-codereview.appspot.com/2275008http://googlechromereleases.blogspot.com/2013/11/stable-channel-update.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-11/msg00025.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-11/msg00026.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.htmlhttp://lists.opensuse.org/opensuse-updates/2014-01/msg00042.htmlhttp://www.debian.org/security/2013/dsa-2799https://code.google.com/p/chromium/issues/detail?id=296804https://code.google.com/p/webrtc/source/detail?r=4827https://webrtc-codereview.appspot.com/2275008
2013-11-19
Published