このページは Debian 向けの修正状況です。脆弱性そのものの説明は CVE 本体のページにあります。
CVE-2019-20503 の詳細 →
DEBIAN-CVE-2019-20503
usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.
出典: OSV.dev (Open Source Vulnerabilities) OSV
影響パッケージ
Debian:12
chromium
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"80.0.3987.149-1"}]}]
Debian:13
chromium
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"80.0.3987.149-1"}]}]
Debian:14
chromium
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"80.0.3987.149-1"}]}]
Debian:12
firefox-esr
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.6.0esr-1"}]}]
Debian:13
firefox-esr
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.6.0esr-1"}]}]
Debian:14
firefox-esr
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.6.0esr-1"}]}]
Debian:12
libusrsctp
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.3.0+20200312-1"}]}]
Debian:13
libusrsctp
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.3.0+20200312-1"}]}]
Debian:14
libusrsctp
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.3.0+20200312-1"}]}]
Debian:12
thunderbird
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:68.6.0-1"}]}]
Debian:13
thunderbird
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:68.6.0-1"}]}]
Debian:14
thunderbird
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:68.6.0-1"}]}]
参照URL
- advisory security-tracker.debian.org