ALINUX2-SA-2020%3A0109
Package updates are available for Alibaba Cloud Linux 2.1903 that fix the following vulnerabilities: CVE-2020-15652: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. CVE-2020-15659: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. CVE-2020-6463: Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2020-6514: Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to potentially exploit heap corruption via a crafted SCTP stream.
Risk Scores
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alibaba Cloud | firefox |
Timeline
- Jul 31, 2020 CVE Published
- Jul 31, 2020 CVE Updated
References
- ALINUX2-SA-2020:0109: firefox security update (Important) advisory
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15652 advisory
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15659 advisory
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6463 advisory
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6514 advisory