CVE-2019-20503
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 3.1%
usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.
Affected products
n/a · n/aReferences
http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00022.htmlhttp://lists.opensuse.org/opensuse-security-announce/2020-03/msg00028.htmlhttp://lists.opensuse.org/opensuse-security-announce/2020-03/msg00030.htmlhttp://lists.opensuse.org/opensuse-security-announce/2020-03/msg00037.htmlhttps://access.redhat.com/errata/RHSA-2020:0815https://access.redhat.com/errata/RHSA-2020:0816https://access.redhat.com/errata/RHSA-2020:0819https://access.redhat.com/errata/RHSA-2020:0820https://bugs.chromium.org/p/project-zero/issues/detail?id=1992https://chromereleases.googleblog.com/2020/03/stable-channel-update-for-desktop_18.htmlhttps://crbug.com/1059349http://seclists.org/fulldisclosure/2020/May/49