CVE-2017-5098
High · 8.8CVSS
8.8
EPSS
15.5%
Published
Oct 27, 2017
CISA due date
—
The record
A use after free in V8 in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:9 | chromium-browser | 0 | 60.0.3112.78-1~deb9u1 |
| Mageia:5 | chromium-browser-stable | 0 | 60.0.3112.101-1.mga5 |
| Mageia:5 | libwebp | 0 | 0.4.3-1.1.mga5 |
| Mageia:6 | chromium-browser-stable | 0 | 60.0.3112.101-1.mga6 |
| Red Hat:rhel_extras:6 | chromium-browser | 0 | 0:60.0.3112.78-1.el6_9 |
| Red Hat:rhel_extras:6 | chromium-browser-debuginfo | 0 | 0:60.0.3112.78-1.el6_9 |
| SUSE:Package Hub 12 SP2 | chromium | 0 | 60.0.3112.78-26.1 |
| Ubuntu:14.04:LTS | chromium-browser | 0 | 60.0.3112.78-0ubuntu0.14.04.1190 |
| Ubuntu:16.04:LTS | chromium-browser | 0 | 60.0.3112.78-0ubuntu0.16.04.1293 |
| Ubuntu:16.04:LTS | libv8-3.14 | 0 | No fix |
| Ubuntu:16.04:LTS | oxide-qt | 0 | No fix |
| Ubuntu:18.04:LTS | libv8-3.14 | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | libv8-3.14 | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | oxide-qt | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | libv8-3.14 | 0 | No fix |
| openSUSE:Tumbleweed | chromium | 0 | 93.0.4577.82-1.1 |
| openSUSE:Tumbleweed | chromium | 0 | 113.0.5672.92-1.1 |
Related vulnerabilities
- CVE-2018-6156 Incorect derivation of a packet length in WebRTC in Google Chrome prior to 68.0.3440.75… Also affects chromium-browser
- CVE-2018-6126 A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote… Also affects chromium-browser
- CVE-2017-15428 Insufficient data validation in V8 builtins string generator could lead to out of bounds… Also affects chromium-browser
- CVE-2018-18356 An integer overflow in path handling lead to a use after free in Skia in Google Chrome… Also affects chromium-browser
- CVE-2018-17480 Execution of user supplied Javascript during array deserialization leading to an out of… Also affects chromium-browser
- CVE-2018-6065 Integer overflow in computing the required allocation size when instantiating a new… Also affects chromium-browser
- CVE-2018-17463 Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a… Also affects chromium-browser
- CVE-2017-5115 Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote… Also affects chromium-browser