NetSight
IP …
medium6.5

CVE-2020-6514

Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to potentially exploit heap …

Impact

Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to potentially exploit heap corruption via a crafted SCTP stream.

Affected products

VendorProductAffected versions
GoogleChrome
before 84.0.4147.89
OpensuseBackports Sle
Version 15.0
OpensuseLeap
Versions 15.1, 15.2
FedoraprojectFedora
Versions 31, 32
DebianDebian Linux
Versions 9.0, 10.0
CanonicalUbuntu Linux
Versions 16.04, 18.04, 20.04
AppleSafari
before 13.1.2
AppleIpados
before 13.6
AppleIphone Os
before 13.6
AppleTvos
before 13.4.8
AppleWatchos
before 6.2.8

Weakness classification

CWE-200

References