CVE-2018-6065
High · 8.8 CISA KEVCVSS
8.8
EPSS
60.3%
Published
Nov 14, 2018
CISA due date
Jun 22, 2022
The record
Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:9 | chromium-browser | 0 | 66.0.3359.117-1~deb9u1 |
| Mageia:6 | chromium-browser-stable | 0 | 67.0.3396.62-1.mga6 |
| Red Hat:rhel_extras:6 | chromium-browser | 0 | 0:65.0.3325.146-2.el6_9 |
| Red Hat:rhel_extras:6 | chromium-browser-debuginfo | 0 | 0:65.0.3325.146-2.el6_9 |
| SUSE:Package Hub 12 SP2 | chromium | 0 | 66.0.3359.181-55.1 |
| Ubuntu:14.04:LTS | chromium-browser | 0 | 65.0.3325.181-0ubuntu0.14.04.1 |
| Ubuntu:16.04:LTS | chromium-browser | 0 | 65.0.3325.181-0ubuntu0.16.04.1 |
| Ubuntu:16.04:LTS | libv8-3.14 | 0 | No fix |
| Ubuntu:16.04:LTS | oxide-qt | 0 | No fix |
| Ubuntu:18.04:LTS | chromium-browser | 0 | 65.0.3325.146-0ubuntu1 |
| Ubuntu:18.04:LTS | libv8-3.14 | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | libv8-3.14 | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | oxide-qt | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | libv8-3.14 | 0 | No fix |
| openSUSE:Tumbleweed | chromium | 0 | 113.0.5672.92-1.1 |
| openSUSE:Tumbleweed | chromium | 0 | 93.0.4577.82-1.1 |
Related vulnerabilities
- CVE-2018-6156 Incorect derivation of a packet length in WebRTC in Google Chrome prior to 68.0.3440.75… Also affects chromium-browser
- CVE-2018-6126 A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote… Also affects chromium-browser
- CVE-2017-15428 Insufficient data validation in V8 builtins string generator could lead to out of bounds… Also affects chromium-browser
- CVE-2018-18356 An integer overflow in path handling lead to a use after free in Skia in Google Chrome… Also affects chromium-browser
- CVE-2018-17480 Execution of user supplied Javascript during array deserialization leading to an out of… Also affects chromium-browser
- CVE-2018-17463 Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a… Also affects chromium-browser
- CVE-2017-5115 Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote… Also affects chromium-browser
- CVE-2017-5116 Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux… Also affects chromium-browser