PT-2018-1739 · Google+5 · Angle+6

Omair · Published 2018-09-05 · Updated 2024-12-12 · CVE-2018-17466

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 70.0.3538.67

Description The issue is caused by incorrect texture handling in the Angle library, leading to an out-of-bounds memory read. This can be exploited by a remote attacker using a specially crafted HTML page, potentially allowing them to execute arbitrary code, cause a denial of service, or disclose sensitive information.

Recommendations For Google Chrome versions prior to 70.0.3538.67, update to version 70.0.3538.67 or later to resolve the issue.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALT-PU-2018-2599

ALT-PU-2018-2824

ALT-PU-2018-2963

BDU:2018-01339

CESA-2018_3831

CESA-2018_3833

CESA-2019_0159

CESA-2019_0160

CVE-2018-17466

DLA-1605-1

DLA-1624-1

DSA-4330-1

DSA-4354-1

DSA-4362-1

MGASA-2018-0483

OPENSUSE-SU-2018:3835-1

OPENSUSE-SU-2018_3273-1

OPENSUSE-SU-2018_3396-1

OPENSUSE-SU-2018_4112-1

OPENSUSE-SU-2019:0249-1

OPENSUSE-SU-2019:0251-1

OPENSUSE-SU-2019_0182-1

OPENSUSE-SU-2019_0251-1

OPENSUSE-SU-2024:10600-1

OPENSUSE-SU-2024:10601-1

OPENSUSE-SU-2024:10681-1

OPENSUSE-SU-2024:12948-1

OPENSUSE-SU-2024:14572-1

RHSA-2018:3004

RHSA-2018:3831

RHSA-2018:3833

RHSA-2018_3004

RHSA-2018_3831

RHSA-2018_3833

RHSA-2019:0159

RHSA-2019:0160

RHSA-2019_0159

RHSA-2019_0160

SUSE-SU-2018:4235-1

SUSE-SU-2018:4236-1

SUSE-SU-2018:4236-2

SUSE-SU-2019:0338-1

USN-3844-1

USN-3868-1

Affected Products

Alt Linux

Angle

Centos

Google Chrome

Red Hat

Suse

Ubuntu

References · 4322

• https://ubuntu.com/security/CVE-2018-12392 · Vendor Advisory
• https://security.gentoo.org/glsa/201811-10 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-17466 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:14572-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-12390 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12948-1 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2018-31/#CVE-2018-17466 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2019:0160 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-12407 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3868-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-12389 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10601-1 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-4354-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-17466 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2019:0338-1 · Vendor Advisory