CVE-2020-6557: 
Google Chrome vulnerability analysis and mitigation

CVE-2020-6557 is a security vulnerability discovered in Google Chrome prior to version 86.0.4240.75. The vulnerability stems from an inappropriate implementation in the networking component that allowed remote attackers to perform domain spoofing via a crafted HTML page (NVD).

The vulnerability has been assigned a CVSS v3.1 base score of 6.5 (Medium), with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N. This indicates that the vulnerability is network exploitable, requires low attack complexity, needs no privileges, but does require user interaction. The scope is unchanged, with no impact on confidentiality, high impact on integrity, and no impact on availability (NVD).

The vulnerability allows an attacker to perform domain spoofing through a specially crafted HTML page, which could lead to users being deceived about the authenticity of websites they visit. This could potentially result in users unknowingly providing sensitive information to malicious sites masquerading as legitimate ones (NVD).

The vulnerability requires user interaction and can be exploited remotely through a crafted HTML page. It was reported by Matthias Gierlings and Marcus Brinkmann from Ruhr-University Bochum on May 15, 2020 (Chrome Release).

The vulnerability was fixed in Google Chrome version 86.0.4240.75. Users are advised to update to this version or later to mitigate the risk. The fix has been incorporated into various Linux distributions including Fedora, Debian, and openSUSE through their respective security updates (Fedora Update, Debian Security).