Lucene search
+L

542 matches found

RedHat Linux
RedHat Linux
added 2020/07/30 7:27 p.m.3 views

chromium-browser: Inappropriate implementation in WebRTC

Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to potentially exploit heap corruption via a crafted SCTP stream...

6.5CVSS7.3AI score0.0779EPSS
Exploits6References5
OSV
OSV
added 2020/07/22 5:15 p.m.3 views

DEBIAN-CVE-2020-6514

Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to potentially exploit heap corruption via a crafted SCTP stream...

6.5CVSS7.3AI score0.0779EPSS
Exploits6References1
OSV
OSV
added 2020/07/22 5:15 p.m.4 views

UBUNTU-CVE-2020-6529

Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to leak cross-origin data via a crafted HTML page...

4.3CVSS5.8AI score0.01306EPSS
Exploits0References2
CNVD
CNVD
added 2020/07/15 12:0 a.m.3 views

Google Chrome Buffer Overflow Vulnerability (CNVD-2020-43472)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A heap buffer overflow vulnerability exists in WebRTC in versions prior to Google Chrome 84.0.4147.89, which can be exploited by an attacker to execute arbitrary co...

8.8CVSS9.6AI score0.01913EPSS
Exploits0References1
CNVD
CNVD
added 2020/07/15 12:0 a.m.3 views

Google Chrome WebRTC Input Validation Error Vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. An input validation error vulnerability exists in versions prior to Google Chrome 84.0.4147.89, which can be exploited by attackers to bypass security restrictions...

4.3CVSS9AI score0.01306EPSS
Exploits0References1
OSV
OSV
added 2020/07/09 2:15 p.m.4 views

CVE-2020-12424

When constructing a permission prompt for WebRTC, a URI was supplied from the content process. This URI was untrusted, and could have been the URI of an origin that was previously granted permission; bypassing the prompt. This vulnerability affects Firefox 78...

6.5CVSS7.4AI score
Exploits0References5
CNVD
CNVD
added 2020/06/16 12:0 a.m.3 views

Meetecho Janus Buffer Overflow Vulnerability (CNVD-2020-53120)

Meetecho Janus is a WebRTC Web Real Time Communication server from Meetecho. A buffer overflow vulnerability exists in the 'janusgetcodecfrompt' function in the utils.c file in Meetecho Janus 0.10.0 and earlier versions, which stems from the program failing to properly check boundaries. A remote...

9.8CVSS8.2AI score0.02288EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2020/06/15 12:55 p.m.2 views

chromium-browser: Use after free in WebRTC

Use after free in WebRTC in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.4AI score0.01674EPSS
Exploits0References5
OSV
OSV
added 2020/05/26 6:15 p.m.2 views

DEBIAN-CVE-2020-6831

A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox ESR 68.8, Firefox 76, and Thunderbird 68.8.0...

9.8CVSS8.8AI score0.05803EPSS
Exploits0References1
OSV
OSV
added 2020/05/21 4:15 a.m.3 views

UBUNTU-CVE-2020-6467

Use after free in WebRTC in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.2AI score0.01674EPSS
Exploits0References4
CNVD
CNVD
added 2020/05/20 12:0 a.m.3 views

Google Chrome WebRTC Resource Management Error Vulnerability (CNVD-2020-29311)

Google Chrome is a web browser from Google, an American company. A resource management error vulnerability exists in WebRTC in versions of Google Chrome prior to 83.0.4103.61. An attacker can exploit the vulnerability to execute arbitrary code with the help of a specially crafted website...

8.8CVSS9.3AI score0.01674EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2020/05/11 9:54 a.m.4 views

usrsctp: Buffer overflow in AUTH chunk input validation

A flaw was found in Mozilla Firefox and Thunderbird. When parsing and validating SCTP chunks in WebRTC a memory buffer overflow could occur leading to memory corruption and an exploitable crash. The highest threat from this vulnerability is to data confidentiality and integrity as well as system...

9.8CVSS7.5AI score0.05803EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2020/05/06 10:53 a.m.4 views

usrsctp: Buffer overflow in AUTH chunk input validation

A flaw was found in Mozilla Firefox and Thunderbird. When parsing and validating SCTP chunks in WebRTC a memory buffer overflow could occur leading to memory corruption and an exploitable crash. The highest threat from this vulnerability is to data confidentiality and integrity as well as system...

9.8CVSS7.5AI score0.05803EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2020/04/21 12:0 a.m.5 views

The vulnerability in the implementation of the WebRTC protocol in Google Chrome browser allows a perpetrator to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of the WebRTC protocol implementation in Google Chrome browser relates to the use of memory after deallocation. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to information and compromise its integrity and accessibility...

9.3CVSS7.4AI score0.00914EPSS
Exploits0References9Affected Software4
CNVD
CNVD
added 2020/03/18 12:0 a.m.4 views

Unspecified Vulnerability in Meetecho Janus (CNVD-2020-19849)

Meetecho Janus is a WebRTC Web Real Time Communication server from Meetecho. Meetecho Janus has a security vulnerability, and no details of the vulnerability are provided at this time...

9.8CVSS7AI score0.01231EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2020/02/17 9:31 a.m.6 views

chromium-browser: Out of bounds write in WebRTC

Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted video stream...

8.8CVSS7.4AI score0.01742EPSS
Exploits0References5
CNVD
CNVD
added 2020/02/12 12:0 a.m.1 views

Google Chrome WebRTC Heap Corruption Vulnerability

Google Chrome is a web browser developed by Google Inc. Google Chrome versions prior to 80.0.3987.87 have an out-of-bounds write security vulnerability in the implementation of WebRTC, which can be exploited by an attacker to pass a constructed video stream that can cause heap damage...

8.8CVSS8.8AI score0.01806EPSS
Exploits0References1
OSV
OSV
added 2020/02/11 3:15 p.m.3 views

UBUNTU-CVE-2020-6389

Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted video stream...

8.8CVSS7AI score0.01742EPSS
Exploits0References2
OSV
OSV
added 2020/01/14 7:15 p.m.2 views

UBUNTU-CVE-2019-13722

Inappropriate implementation in WebRTC in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

6.5CVSS7AI score0.01001EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.6 views

The vulnerability of the WebRTC technology implementation in Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the WebRTC technology implemented in Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created file...

10CVSS8.2AI score0.04798EPSS
Exploits1References8Affected Software2
Rows per page
Query Builder