CVE-2020-12625

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2020-09/msg00083.html · Third Party Advisory
• DrunkenShells/Disclosures · Exploit
• roundcube/roundcubemail commit 87e4cd0 · Patch
• roundcube/roundcubemail · Patch
• roundcube/roundcubemail release 1.4.4 · Third Party Advisory
• security.gentoo.org/glsa/202007-41 · Third Party Advisory
• debian.org/security/2020/dsa-4674 · Third Party Advisory

backports sle のその他の脆弱性

• CVE-2020-6557中 6.5Inappropriate implementation in networking in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to perform domain spoofing via a…
• CVE-2020-16011緊急 9.6Heap buffer overflow in UI in Google Chrome on Windows prior to 86.0.4240.183 allowed a remote attacker who had compromised the renderer pro…
• CVE-2020-16009高 8.8悪用確認済み（CISA KEV）Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption …
• CVE-2020-16008高 8.8Stack buffer overflow in WebRTC in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit stack corruption vi…
• CVE-2020-16007高 7.8Insufficient data validation in installer in Google Chrome prior to 86.0.4240.183 allowed a local attacker to potentially elevate privilege …