First published: Tue Feb 18 2020(Updated: )
Type confusion in V8 in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Credit: chrome-cve-admin@google.com
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/chromium-browser | <0:80.0.3987.122-1.el6_10 | 0:80.0.3987.122-1.el6_10 |
debian/chromium | 90.0.4430.212-1~deb10u1 116.0.5845.180-1~deb11u1 120.0.6099.129-1~deb11u1 119.0.6045.199-1~deb12u1 120.0.6099.129-1~deb12u1 120.0.6099.129-1 | |
redhat/chromium-browser | <80.0.3987.116 | 80.0.3987.116 |
Google Chrome | <80.0.3987.116 | 80.0.3987.116 |
Google Chrome | <80.0.3987.116 | |
Fedoraproject Fedora | =30 | |
Fedoraproject Fedora | =31 | |
Redhat Enterprise Linux Desktop | =6.0 | |
Red Hat Enterprise Linux Server | =6.0 | |
Redhat Enterprise Linux Workstation | =6.0 | |
Debian Debian Linux | =9.0 | |
Debian Debian Linux | =10.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2020-6383 is high with a severity value of 8.8.
A remote attacker can potentially exploit CVE-2020-6383 by exploiting heap corruption via a crafted HTML page.
The software versions prior to 80.0.3987.116 of Google Chrome (chromium-browser) in Red Hat (el6_10) are affected by CVE-2020-6383.
To fix CVE-2020-6383, update Google Chrome to version 80.0.3987.116 or later.
More information about CVE-2020-6383 can be found at the following references: - [CVE-2020-6383](https://www.cve.org/CVERecord?id=CVE-2020-6383) - [NVD](https://nvd.nist.gov/vuln/detail/CVE-2020-6383) - [Chrome Releases](https://chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop_18.html) - [Red Hat Bugzilla](https://bugzilla.redhat.com/show_bug.cgi?id=1807498) - [Red Hat Errata](https://access.redhat.com/errata/RHSA-2020:0738)