CVE-2020-6467: 
Node.js vulnerability analysis and mitigation

CVE-2020-6467 is a use-after-free vulnerability discovered in the WebRTC component of Google Chrome versions prior to 83.0.4103.61. The vulnerability was disclosed on May 21, 2020, and affects the WebRTC implementation in Google Chrome browser (NVD, Chrome Release).

The vulnerability is classified as a use-after-free issue in the WebRTC (Web Real-Time Communication) component of Chrome. It has been assigned a CVSS v3.1 base score of 8.8 (HIGH), with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The vulnerability could be exploited through a crafted HTML page, potentially leading to heap corruption (NVD).

If successfully exploited, this vulnerability could allow a remote attacker to potentially exploit heap corruption through a specially crafted HTML page, potentially leading to arbitrary code execution within the context of the browser (NVD, Debian Security).

The vulnerability requires user interaction and can be exploited remotely through a crafted HTML page. The discovery is credited to ZhanJia Song, who reported it on April 6, 2020. Google awarded a bug bounty of $7,500 for this finding (Chrome Release).

The vulnerability was patched in Google Chrome version 83.0.4103.61. Users and administrators are advised to upgrade to this version or later. Multiple Linux distributions have also released security updates to address this vulnerability, including Debian, Fedora, and Gentoo (Debian Security, Gentoo Security).