Поиск уязвимостей

Уязвимость функции sctp_load_addresses_from_init реализации протокола передачи сообщений с поддержкой множественной адресации usrsctp, связанная с чтением за границами буфера в памяти, позволяющая нарушителю вызвать отказ в обслуживании

ALT-PU-2020-1485: package `thunderbird` update to version 68.6.0-alt1

ALT-PU-2020-1461: package `firefox-esr` update to version 68.6.0-alt1

ALT-PU-2020-1486: package `firefox` update to version 74.0-alt1

usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.

usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.

usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.

usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.

usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_address ...

usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.

Security update for MozillaThunderbird

Security update for MozillaFirefox

Security update for MozillaFirefox

Security update for MozillaThunderbird

Security update for MozillaFirefox

Security update for MozillaFirefox

ELSA-2020-0919: thunderbird security update (IMPORTANT)

ELSA-2020-0914: thunderbird security update (IMPORTANT)

ELSA-2020-0905: thunderbird security update (IMPORTANT)

ELSA-2020-0820: firefox security update (IMPORTANT)