Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2019-20503HistoryMar 06, 2020 - 8:15 p.m.
CVE-2019-20503
2020-03-0620:15:12
Debian Security Bug Tracker
security-tracker.debian.org
38
usrsctp
out-of-bounds reads
sctp_load_addresses_from_init
unix
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.002
Percentile
57.0%
usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | chromium | < 80.0.3987.149-1 | chromium_80.0.3987.149-1_all.deb |
| Debian | 11 | all | chromium | < 80.0.3987.149-1 | chromium_80.0.3987.149-1_all.deb |
| Debian | 999 | all | chromium | < 80.0.3987.149-1 | chromium_80.0.3987.149-1_all.deb |
| Debian | 13 | all | chromium | < 80.0.3987.149-1 | chromium_80.0.3987.149-1_all.deb |
| Debian | 999 | all | firefox | < 74.0-1 | firefox_74.0-1_all.deb |
| Debian | 12 | all | firefox-esr | < 68.6.0esr-1 | firefox-esr_68.6.0esr-1_all.deb |
| Debian | 11 | all | firefox-esr | < 68.6.0esr-1 | firefox-esr_68.6.0esr-1_all.deb |
| Debian | 999 | all | firefox-esr | < 68.6.0esr-1 | firefox-esr_68.6.0esr-1_all.deb |
| Debian | 13 | all | firefox-esr | < 68.6.0esr-1 | firefox-esr_68.6.0esr-1_all.deb |
| Debian | 12 | all | libusrsctp | < 0.9.3.0+20200312-1 | libusrsctp_0.9.3.0+20200312-1_all.deb |
Related
debian
debian
[SECURITY] [DLA 3481-1] libusrsctp security update
2023-07-06 22:25:50
[SECURITY] [DLA 2150-1] thunderbird security update
2020-03-20 10:00:10
[SECURITY] [DLA 2140-1] firefox-esr security update
2020-03-11 21:34:36
nvd
nvd
CVE-2019-20503
2020-03-06 20:15:12
osv
osv
CVE-2019-20503
2020-03-06 20:15:12
libusrsctp - security update
2023-07-06 00:00:00
firefox-esr - security update
2020-03-11 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-3481-1)
2023-07-18 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:0717-1)
2021-04-19 00:00:00
CentOS: Security Advisory for firefox (CESA-2020:0815)
2020-03-26 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-08-06 21:30:22
Denial Of Service (DoS)
2021-03-09 04:21:44
prion
prion
Out-of-bounds
2020-03-06 20:15:00
nessus
nessus
Debian DLA-3481-1 : libusrsctp - LTS security update
2023-07-18 00:00:00
CBL Mariner 2.0 Security Update: usrsctp (CVE-2019-20503)
2024-07-03 00:00:00
RHEL 5 : usrsctp (Unpatched Vulnerability)
2024-05-11 00:00:00
cve
cve
CVE-2019-20503
2020-03-06 20:15:12
cvelist
cvelist
CVE-2019-20503
2020-03-06 00:00:00
redhatcve
redhatcve
CVE-2019-20503
2020-04-05 23:11:41
cbl_mariner
cbl_mariner
CVE-2019-20503 affecting package usrsctp for versions less than 0.9.5.0-1
2022-06-26 03:29:33
CVE-2019-20503 affecting package usrsctp for versions less than 0.9.5.0-1
2024-03-19 17:21:46
alpinelinux
alpinelinux
CVE-2019-20503
2020-03-06 20:15:12
ubuntucve
ubuntucve
CVE-2019-20503
2020-03-06 00:00:00
centos
centos
firefox security update
2020-03-25 19:17:41
thunderbird security update
2020-03-25 19:18:41
firefox security update
2020-03-25 19:19:48
oraclelinux
oraclelinux
thunderbird security update
2020-03-23 00:00:00
firefox security update
2020-03-17 00:00:00
thunderbird security update
2020-07-07 00:00:00
suse
suse
Security update for MozillaThunderbird (important)
2020-03-22 00:00:00
Security update for MozillaFirefox (important)
2020-03-14 00:00:00
Security update for chromium (important)
2020-03-27 00:00:00
mageia
mageia
Updated thunderbird packages fix security vulnerabilities
2020-03-14 11:35:35
Updated firefox packages fix security vulnerabilities
2020-03-14 11:35:35
Updated chromium-browser-stable packages fix security vulnerability
2020-04-01 04:56:57
slackware
slackware
[slackware-security] mozilla-firefox
2020-03-10 20:37:32
[slackware-security] mozilla-thunderbird
2020-03-13 21:47:41
redhat
redhat
(RHSA-2020:0819) Important: firefox security update
2020-03-16 10:30:19
(RHSA-2020:0918) Important: thunderbird security update
2020-03-23 07:49:11
(RHSA-2020:0914) Important: thunderbird security update
2020-03-23 07:29:42
altlinux
altlinux
Security fix for the ALT Linux 10 package thunderbird version 68.6.0-alt1
2020-03-14 00:00:00
Security fix for the ALT Linux 10 package firefox-esr version 68.6.0-alt1
2020-03-10 00:00:00
archlinux
archlinux
[ASA-202003-11] thunderbird: multiple issues
2020-03-16 00:00:00
[ASA-202003-12] chromium: multiple issues
2020-03-19 00:00:00
[ASA-202003-8] firefox: multiple issues
2020-03-11 00:00:00
kaspersky
kaspersky
KLA11701 Multiple vulnerabilities in Mozilla Thunderbird
2020-03-10 00:00:00
KLA11688 Multiple vulnerabilities in Mozilla Firefox ESR
2020-03-10 00:00:00
KLA11724 Multiple vulnerabilities in Opera
2020-03-27 00:00:00
amazon
amazon
Important: thunderbird
2020-04-20 20:48:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox ESR 68.6 — Mozilla
2020-03-10 00:00:00
Security Vulnerabilities fixed in Thunderbird 68.6 — Mozilla
2020-03-10 00:00:00
Security Vulnerabilities fixed in Firefox 74 — Mozilla
2020-03-10 00:00:00
chrome
chrome
Stable Channel Update for Desktop
2020-03-18 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: chromium-80.0.3987.149-1.fc32
2020-03-27 08:04:11
[SECURITY] Fedora 31 Update: chromium-80.0.3987.149-1.fc31
2020-03-24 01:49:34
[SECURITY] Fedora 30 Update: chromium-80.0.3987.149-1.fc30
2020-03-27 10:46:23
apple
apple
About the security content of Safari 13.1.1 - Apple Support
2020-05-27 12:42:27
About the security content of Safari 13.1.1
2020-05-26 00:00:00
About the security content of tvOS 13.4.5 - Apple Support
2020-09-21 04:33:14
ubuntu
ubuntu
Firefox vulnerabilities
2020-03-11 00:00:00
Thunderbird vulnerabilities
2020-04-13 00:00:00
Thunderbird vulnerabilities
2020-04-21 00:00:00
gentoo
gentoo
Mozilla Firefox: Multiple vulnerabilities
2020-03-12 00:00:00
Mozilla Thunderbird: Multiple vulnerabilities
2020-03-14 00:00:00
mscve
mscve
Chromium Security Updates for Microsoft Edge (Chromium-Based)
2020-01-28 08:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.002
Percentile
57.0%
Related for DEBIANCVE:CVE-2019-20503