CVE-2016-5177
Use-after-free vulnerability in V8 in Google Chrome before 53.0.2785.143 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via unknown vectors.
- Score
- CVSS 3.0 8.8 High
- Status
- Modified - chrome-cve-admin@google.com
- Published
- 2017-05-23
- Last modified
- 2024-08-06
- Weaknesses
- CWE-416
Affected products
- Debian Linux (Debian)
- Fedora (Fedoraproject)
- Chrome (Google)
- Leap (Opensuse)
- Opensuse (Opensuse)
- Enterprise Linux Server Supplementary (Redhat)
- Enterprise Linux Workstation Supplementary (Redhat)
References
- http://lists.opensuse.org/opensuse-updates/2016-10/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2016-10/msg00001.html
- http://rhn.redhat.com/errata/RHSA-2016-2007.html
- http://www.debian.org/security/2016/dsa-3683
- http://www.securityfocus.com/bid/93238
- http://www.securitytracker.com/id/1036970
- https://bugzilla.redhat.com/show_bug.cgi?id=1380631
- https://chromereleases.googleblog.com/2016/09/stable-channel-update-for-desktop_29.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FWZVE5PX27FWPLGOPDA7Z…
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UNUTOWCXLWVXOTGQUS53DS…
- https://security.gentoo.org/glsa/201610-09
