CVE-2020-15999
Heap buffer overflow in CefSharp
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2021-11-03. Federal due date: 2021-11-17.
Apply updates per vendor instructions.
Impact
### Impact A memory corruption bug(Heap overflow) in the FreeType font rendering library. > This can be exploited by attackers to execute arbitrary code by using specially crafted fonts with embedded PNG images . As per https://www.secpod.com/blog/chrome-zero-day-under-active-exploitation-patch-now/ Google is aware of reports that an exploit for CVE-2020-15999 exists in the wild. ### Patches Upgrade to 85.3.130 or higher ### References - https://www.secpod.com/blog/chrome-zero-day-under-active-exploitation-patch-now/ - https://www.zdnet.com/article/google-releases-chrome-security-update-to-patch-actively-exploited-zero-day/ - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15999 - https://magpcss.org/ceforum/viewtopic.php?f=10&t=17942 To review the `CEF/Chromium` patch see https://bitbucket.org/chromiumembedded/cef/commits/cd6cbe008b127990036945fb75e7c2c1594ab10d
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| nuget | CefSharp.Common | < 85.3.130 | 85.3.130 |
| nuget | CefSharp.Wpf | < 85.3.130 | 85.3.130 |
| nuget | CefSharp.WinForms | < 85.3.130 | 85.3.130 |
| nuget | CefSharp.Wpf.HwndHost | < 85.3.130 | 85.3.130 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chrome | before 86.0.4240.111 | |
| Freetype | Freetype | from 2.6.0 before 2.10.4 |
| Debian | Debian Linux | Version 10.0 |
| Fedoraproject | Fedora | Version 31 |
| Opensuse | Backports Sle | Version 15.0 |
| Netapp | Ontap Select Deploy Administration Utility | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- CISA KEV catalog
- http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html
- http://seclists.org/fulldisclosure/2020/Nov/33
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop_20.html
- https://crbug.com/1139963
- https://googleprojectzero.blogspot.com/p/rca-cve-2020-15999.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J3QVIGAAJ4D62YEJAJJWMCCBCOQ6TVL7/
- https://security.gentoo.org/glsa/202011-12
- https://security.gentoo.org/glsa/202012-04
- https://security.gentoo.org/glsa/202401-19
- https://www.debian.org/security/2021/dsa-4824
- https://security.netapp.com/advisory/ntap-20240812-0001/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-15999
- https://github.com/advisories/GHSA-pv36-h7jh-qm62
- https://github.com/cefsharp/CefSharp/security/advisories/GHSA-pv36-h7jh-qm62
- https://www.nuget.org/packages/CefSharp.WinForms
- https://www.nuget.org/packages/CefSharp.Wpf
- https://www.nuget.org/packages/CefSharp.Wpf.HwndHost
- https://nvd.nist.gov/vuln/detail/CVE-2020-15999
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J3QVIGAAJ4D62YEJAJJWMCCBCOQ6TVL7
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J3QVIGAAJ4D62YEJAJJWMCCBCOQ6TVL7
- https://www.nuget.org/packages/CefSharp.Common
- https://security.netapp.com/advisory/ntap-20240812-0001