CVE-2020-6556: Buffer Overflow

Reference Links

• https://security-tracker.debian.org/tracker/CVE-2020-6556
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00049.html
• https://chromereleases.googleblog.com/2020/08/stable-channel-update-for-desktop_18.html (Advisory)
• https://crbug.com/1115345
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EE7XWIZBME7JAY7N6CGPET4CLNHHEIVT/
• https://www.debian.org/security/2021/dsa-4824
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EE7XWIZBME7JAY7N6CGPET4CLNHHEIVT/

Parent vulnerabilities

(Appears in the following advisories)

• 359623453294637770

Frequently Asked Questions

• What is the severity of CVE-2020-6556?

  CVE-2020-6556 is classified as a high severity vulnerability due to the potential for remote code execution via heap corruption.

• How do I fix CVE-2020-6556?

  To fix CVE-2020-6556, upgrade to Google Chrome version 84.0.4147.135 or later, or update your Debian or Fedora packages to the corresponding patched versions.

• What versions of Google Chrome are affected by CVE-2020-6556?

  Google Chrome versions prior to 84.0.4147.135 are affected by CVE-2020-6556.

• Does CVE-2020-6556 affect Chromium on Debian systems?

  Yes, CVE-2020-6556 impacts Chromium versions below 90.0.4430.212-1~deb10u1 on Debian systems.

• What type of attack does CVE-2020-6556 facilitate?

  CVE-2020-6556 potentially allows an attacker to perform remote code execution through a crafted HTML page that exploits heap corruption.