Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia: 2021-0012 High: Firefox Use-After-Free Code Execution

mageia
Calendar Grey January 8, 2021
Dist Mageia Esm H88
Mageia 2021-0013 updates chromium packages to address a significant vulnerability, bolstering defenses against possible attacks.
A malicious peer could have modified a COOKIE-ECHO chunk in a SCTP packet in a way that potentially resulted in a use-after-free

Summary

A malicious peer could have modified a COOKIE-ECHO chunk in a SCTP packet in a way that potentially resulted in a use-after-free. We presume that with enough effort it could have been exploited to run arbitrary code. (CVE-2020-16044).

References

- https://bugs.mageia.org/show_bug.cgi?id=28034

- - https://www.mozilla.org/en-US/security/advisories/mfsa2021-01/

- https://www.cve.org/CVERecord?id=CVE-2020-16044

Topics%20covered

Topics Covered

security advisory high severity update critical code execution arbitrary code execution firefox Firefox use-after-free Mageia mageia

Resolution

SRPMS

- 7/core/nss-3.60.1-1.mga7

- 7/core/firefox-78.6.1-1.mga7

- 7/core/firefox-l10n-78.6.1-1.mga7

Publication date: 08 Jan 2021
URL: https://advisories.mageia.org/MGASA-2021-0012.html
Type: security
CVE: CVE-2020-16044

Topics%20covered

Topics Covered

security advisory high severity update critical code execution arbitrary code execution firefox Firefox use-after-free Mageia mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here