CVE-2020-6831 — Out-of-bounds Write in Mozilla Firefox
Severity
9.8CRITICALNVD
OSV8.1
EPSS
6.3%
top 9.06%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 26
Latest updateMay 24
Description
A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox ESR < 68.8, Firefox < 76, and Thunderbird < 68.8.0.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9
Affected Packages11 packages
Also affects: Debian Linux 10.0, 9.0, Ubuntu Linux 16.04, 18.04, 19.10, 20.04
Patches
🔴Vulnerability Details
7GHSA▶
GHSA-5x26-44w7-97vc: A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC↗2022-05-24
OSV▶
CVE-2020-6831: A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC↗2020-05-26
CVEList▶
CVE-2020-6831: A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC↗2020-05-26