usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-chromiumalpine-linux-upgrade-firefox-esralpine-linux-upgrade-firefoxalpine-linux-upgrade-mozjs68alpine-linux-upgrade-thunderbirdalpine-linux-upgrade-librewolf | Mar 24, 2020 | Mar 6, 2020 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-thunderbirdamazon-linux-ami-2-upgrade-thunderbird-debuginfo | Apr 27, 2020 | Mar 6, 2020 | |
| Apple Safari | apple-safari-upgrade-13_1_1apple-safari-windows-uninstall | May 27, 2020 | Mar 6, 2020 | |
| Arch Linux | View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗ | arch-linux-upgrade-latest | Jul 11, 2025 | Mar 6, 2020 |
| Centos_linux | — | centos-upgrade-chromium-browsercentos-upgrade-chromium-browser-debuginfocentos-upgrade-firefoxcentos-upgrade-firefox-debuginfocentos-upgrade-firefox-debugsourcecentos-upgrade-thunderbirdcentos-upgrade-thunderbird-debuginfocentos-upgrade-thunderbird-debugsource | Mar 17, 2020 | Mar 6, 2020 |
| Debian | debian-upgrade-chromiumdebian-upgrade-firefox-esrdebian-upgrade-libusrsctpdebian-upgrade-thunderbird | Mar 13, 2020 | Mar 6, 2020 | |
| Gentoo Linux | gentoo-linux-upgrade-mail-client-thunderbirdgentoo-linux-upgrade-mail-client-thunderbird-bingentoo-linux-upgrade-www-client-firefoxgentoo-linux-upgrade-www-client-firefox-bin | Mar 13, 2020 | Mar 6, 2020 | |
| Google Chrome | google-chrome-upgrade-latest | Sep 9, 2022 | Mar 6, 2020 | |
| Mfsa2020 08 | mozilla-firefox-upgrade-74_0 | Mar 11, 2020 | Mar 6, 2020 | |
| Mfsa2020 09 | mozilla-firefox-esr-upgrade-68_6 | Mar 11, 2020 | Mar 6, 2020 | |
| Microsoft Edge | microsoft-edge-upgrade-latest | Nov 17, 2021 | Mar 6, 2020 | |
| Mozilla Thunderbird | mozilla-thunderbird-upgrade-68_6 | Mar 13, 2020 | Mar 6, 2020 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-mail-thunderbird-68-6-0-11-4-20-0-1-4-0oracle-solaris-11-4-upgrade-mail-thunderbird-plugin-thunderbird-lightning-68-6-0-11-4-20-0-1-4-0oracle-solaris-11-4-upgrade-web-browser-firefox-68-6-0-11-4-20-0-1-4-0oracle-solaris-11-4-upgrade-web-data-firefox-bookmarks-68-6-0-11-4-20-0-1-4-0 | Jan 19, 2021 | Mar 6, 2020 | |
| Oracle_linux | — | oracle-linux-upgrade-firefoxoracle-linux-upgrade-thunderbird | Mar 17, 2020 | Mar 10, 2020 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-firefoxredhat-upgrade-firefox-debuginforedhat-upgrade-firefox-debugsourceredhat-upgrade-thunderbirdredhat-upgrade-thunderbird-debuginforedhat-upgrade-thunderbird-debugsource | Mar 17, 2020 | Mar 6, 2020 | |
| Suse | — | suse-upgrade-chromedriversuse-upgrade-chromiumsuse-upgrade-mozillafirefoxsuse-upgrade-mozillafirefox-branding-upstreamsuse-upgrade-mozillafirefox-buildsymbolssuse-upgrade-mozillafirefox-develsuse-upgrade-mozillafirefox-translations-commonsuse-upgrade-mozillafirefox-translations-othersuse-upgrade-mozillathunderbirdsuse-upgrade-mozillathunderbird-translations-commonsuse-upgrade-mozillathunderbird-translations-other | Mar 13, 2020 | Mar 6, 2020 |
| Ubuntu | ubuntu-upgrade-firefoxubuntu-upgrade-thunderbird | Mar 12, 2020 | Mar 6, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub