PT-2016-6297 · Google+4 · V8+5

Adam Mariš · Published 2016-09-29 · Updated 2024-06-15 · CVE-2016-5177

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 53.0.2785.143

Description A use-after-free issue in the V8 component of Google Chrome allows remote attackers to cause a denial of service, potentially leading to a crash, or possibly have other unspecified impacts. The attack vectors for this issue are not specified.

Recommendations For versions prior to 53.0.2785.143, update to version 53.0.2785.143 or later to resolve the issue.

Fix

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2016-2194

CVE-2016-5177

DSA-3683-1

MGASA-2016-0335

OPENSUSE-SU-2016:2429-1

OPENSUSE-SU-2016:2432-1

OPENSUSE-SU-2024:10171-1

OPENSUSE-SU-2024:12948-1

RHSA-2016:2007

RHSA-2016_2007

USN-3091-1

Affected Products

Alt Linux

Google Chrome

Opera

Red Hat

Ubuntu

V8

References · 2369

• https://ubuntu.com/security/CVE-2016-5175 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-7549 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2016-0335.html · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2016:2432-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12948-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2016-10/msg00001.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-5170 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2016-0335 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2016-10/msg00000.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-5177 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3683-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3091-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2016:2429-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3091-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-5177 · Vendor Advisory