Vulnerability Name:

CVE-2020-6509 (CCN-183761)

Assigned:2020-06-08
Published:2020-06-08
Updated:2023-01-20
Summary:
CVSS v3 Severity:9.6 Critical (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
8.3 High (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): Required
Scope:Scope (S): Changed
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
8.8 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
7.7 High (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): Required
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
CVSS v2 Severity:6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
9.0 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): Single_Instance
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
Vulnerability Consequences:Gain Access
References:Source: MITRE
Type: CNA
CVE-2020-6509

Source: chrome-cve-admin@google.com
Type: Broken Link
chrome-cve-admin@google.com

Source: CCN
Type: Google Chrome Releases Web site
Stable Channel Update for Desktop

Source: chrome-cve-admin@google.com
Type: Vendor Advisory
chrome-cve-admin@google.com

Source: chrome-cve-admin@google.com
Type: Issue Tracking, Permissions Required, Third Party Advisory
chrome-cve-admin@google.com

Source: XF
Type: UNKNOWN
google-cve20206509-code-exec(183761)

Source: chrome-cve-admin@google.com
Type: Third Party Advisory
chrome-cve-admin@google.com

Vulnerable Configuration:Configuration CCN 1:
  • cpe:/a:google:chrome:83:*:*:*:*:*:*:*

  • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:93624
    P
    (Important)
    2022-07-11
    oval:org.opensuse.security:def:20206509
    V
    CVE-2020-6509
    2022-06-30
    oval:org.opensuse.security:def:64834
    P
    Security update for permissions (Moderate) (in QA)
    2022-01-17
    oval:org.opensuse.security:def:112066
    P
    chromedriver-93.0.4577.82-1.1 on GA media (Moderate)
    2022-01-17
    oval:org.opensuse.security:def:64617
    P
    Security update for postgresql14 (Important)
    2021-11-22
    oval:org.opensuse.security:def:64602
    P
    Security update for pcre (Moderate)
    2021-10-27
    oval:org.opensuse.security:def:64597
    P
    Security update for fetchmail (Moderate)
    2021-10-20
    oval:org.opensuse.security:def:100337
    P
    (Moderate)
    2021-10-20
    oval:org.opensuse.security:def:64777
    P
    Security update for libqt5-qtsvg (Moderate)
    2021-10-12
    oval:org.opensuse.security:def:64585
    P
    Security update for libcryptopp (Moderate)
    2021-10-06
    oval:org.opensuse.security:def:105615
    P
    chromedriver-93.0.4577.82-1.1 on GA media (Moderate)
    2021-10-01
    oval:org.opensuse.security:def:63191
    P
    389-ds-1.4.0.3-2.39 on GA media (Moderate)
    2021-09-21
    oval:org.opensuse.security:def:64762
    P
    Security update for apache2 (Important)
    2021-09-03
    oval:org.opensuse.security:def:63450
    P
    python2-SQLAlchemy-1.2.14-6.3.1 on GA media (Moderate)
    2021-08-10
    oval:org.opensuse.security:def:63465
    P
    dia-0.97.3-4.3.3 on GA media (Moderate)
    2021-08-10
    oval:org.opensuse.security:def:63357
    P
    memcached-1.5.6-4.5.30 on GA media (Moderate)
    2021-08-10
    oval:org.opensuse.security:def:63369
    P
    redis-6.0.10-1.7.1 on GA media (Moderate)
    2021-08-10
    oval:org.opensuse.security:def:62994
    P
    bsdtar-3.4.2-2.24 on GA media (Moderate)
    2021-08-09
    oval:org.opensuse.security:def:64739
    P
    Security update for webkit2gtk3 (Important)
    2021-08-03
    oval:org.opensuse.security:def:64738
    P
    Security update for git (Moderate)
    2021-07-29
    oval:org.opensuse.security:def:64733
    P
    Security update for the Linux Kernel (Important)
    2021-07-20
    oval:org.opensuse.security:def:64727
    P
    Security update for qemu (Moderate)
    2021-06-30
    oval:org.opensuse.security:def:64726
    P
    Security update for lua53 (Moderate)
    2021-06-29
    oval:org.opensuse.security:def:64721
    P
    Security update for cryptctl (Important)
    2021-06-23
    oval:org.opensuse.security:def:64719
    P
    Security update for wireshark (Important)
    2021-06-22
    oval:org.opensuse.security:def:64889
    P
    Security update for umoci (Moderate)
    2021-06-04
    oval:org.opensuse.security:def:64704
    P
    Security update for python-py (Moderate)
    2021-06-04
    oval:org.opensuse.security:def:64510
    P
    Security update for postgresql13 (Moderate)
    2021-05-27
    oval:org.opensuse.security:def:64509
    P
    Security update for libX11 (Moderate)
    2021-05-26
    oval:org.opensuse.security:def:64495
    P
    Security update for the Linux Kernel (Important)
    2021-05-12
    oval:org.opensuse.security:def:64494
    P
    Security update for shim (Important)
    2021-05-11
    oval:org.opensuse.security:def:65136
    P
    Security update for gdm (Important)
    2020-12-14
    oval:org.opensuse.security:def:63143
    P
    apache2-mod_security2-2.9.2-1.34 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:63172
    P
    nginx-1.14.0-1.14 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:63151
    P
    gnuplot-5.2.2-1.109 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:63150
    P
    freeradius-server-3.0.16-1.41 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:63179
    P
    rsyslog-module-gssapi-8.33.1-1.30 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:63155
    P
    krb5-plugin-kdb-ldap-1.15.2-4.25 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:62947
    P
    dom4j-1.6.1-10.12 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:63163
    P
    libsaml-devel-2.6.1-1.31 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:62951
    P
    glibc-devel-32bit-2.26-13.48.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:62954
    P
    graphviz-perl-2.40.1-6.3.2 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:62962
    P
    libpcp-devel-4.3.1-3.8.2 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:62979
    P
    perl-doc-5.26.1-7.9.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:62966
    P
    nasm-2.13.02-1.17 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:63157
    P
    libcacard-devel-2.5.3-1.27 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:62969
    P
    openldap2-devel-32bit-2.4.46-9.28.2 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:63138
    P
    389-ds-1.4.0.3-2.39 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:74949
    P
    Security update for chromium (Important)
    2020-12-01
    oval:org.opensuse.security:def:64033
    P
    Security update for ceph (Important)
    2020-12-01
    oval:org.opensuse.security:def:63653
    P
    Security update for ovmf (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:64936
    P
    Security update for libgcrypt (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:64264
    P
    glibc-32bit on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:74831
    P
    Security update for phpMyAdmin (Important)
    2020-12-01
    oval:org.opensuse.security:def:63800
    P
    Security update for sudo (Important)
    2020-12-01
    oval:org.opensuse.security:def:65002
    P
    Security update for java-11-openjdk (Important)
    2020-12-01
    oval:org.opensuse.security:def:64846
    P
    Security update for LibreOffice (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:74964
    P
    Security update for opera (Important)
    2020-12-01
    oval:org.opensuse.security:def:64029
    P
    Security update for libpng12 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:65124
    P
    Security update for libssh (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:63668
    P
    Security update for krb5 (Important)
    2020-12-01
    oval:org.opensuse.security:def:64948
    P
    Security update for webkit2gtk3 (Important)
    2020-12-01
    oval:org.opensuse.security:def:64358
    P
    liboath-devel on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:75069
    P
    Security update for openldap2 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:63815
    P
    Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:65014
    P
    Security update for python3 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:63660
    P
    Security update for ImageMagick (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:75206
    P
    Security update for chromium (Important)
    2020-12-01
    oval:org.opensuse.security:def:64044
    P
    Security update for xrdp (Important)
    2020-12-01
    oval:org.opensuse.security:def:63866
    P
    Security update for webkit2gtk3 (Important)
    2020-12-01
    oval:org.opensuse.security:def:64373
    P
    libproxy-devel on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:75081
    P
    Security update for jasper (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:64021
    P
    Security update for python-cffi, python-cryptography (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:64874
    P
    Security update for openldap2 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:63672
    P
    Security update for webkit2gtk3 (Important)
    2020-12-01
    oval:org.opensuse.security:def:75218
    P
    Security update for opera (Important)
    2020-12-01
    oval:org.opensuse.security:def:64252
    P
    flac-devel on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:74816
    P
    Security update for git (Important)
    2020-12-01
    oval:org.opensuse.security:def:63878
    P
    Security update for lftp (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:103031
    P
    Security update for chromium (Important)
    2020-07-22
    oval:org.opensuse.security:def:96341
    P
    Security update for chromium (Important)
    2020-07-22
    oval:org.opensuse.security:def:109688
    P
    Security update for chromium (Important)
    2020-07-22
    oval:org.opensuse.security:def:110955
    P
    Security update for opera (Important)
    2020-07-10
    oval:org.opensuse.security:def:110626
    P
    Security update for opera (Important)
    2020-07-10
    oval:org.opensuse.security:def:110943
    P
    Security update for chromium (Important)
    2020-06-28
    oval:org.opensuse.security:def:110611
    P
    Security update for chromium (Important)
    2020-06-28
    BACK
    google chrome 83