WebRTC Heap Buffer Overflow Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 25/08/2022. Patch affected systems as an emergency. It is known to be used in ransomware campaigns.
| Package | Affected versions | Patched versions |
|---|---|---|
| extra packages for enterprise linux | = 8.0 | |
| chrome | < 103.0.5060.114 | 103.0.5060.114 |
| webkitgtk | < 2.36.5 | 2.36.5 |
| wpe webkit | < 2.36.5 | 2.36.5 |
Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free