PT-2023-1177 · Google+4 · Google Chrome+4

Cassidy Kim · Published 2023-01-24 · Updated 2024-10-17 · CVE-2023-0472

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 109.0.5414.119

Description The issue is related to a use after free in WebRTC, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. The severity of this issue is considered high.

Recommendations For versions prior to 109.0.5414.119, update to version 109.0.5414.119 or later to resolve the issue. As a temporary workaround, consider restricting access to WebRTC functionality until a patch is applied.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2023-1152

ALT-PU-2023-1245

ALT-PU-2023-1410

ALT-PU-2023-1462

ALT-PU-2023-1603

ALT-PU-2023-1671

BDU:2023-00394

CVE-2023-0472

DSA-5328-1

MGASA-2023-0044

OPENSUSE-SU-2023:0032-1

OPENSUSE-SU-2023:0044-1

OPENSUSE-SU-2023:0115-1

OPENSUSE-SU-2023_0044-1

OPENSUSE-SU-2023_0115-1

OPENSUSE-SU-2024:12642-1

OPENSUSE-SU-2024:12778-1

OPENSUSE-SU-2024:12948-1

USN-5881-1

Affected Products

Alt Linux

Astra Linux

Google Chrome

Suse

Ubuntu

References · 2362

• https://cve.org/CVERecord?id=CVE-2023-0472 · Security Note
• https://osv.dev/vulnerability/DSA-5328-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20231214SE16 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12642-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-0702 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-0700 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-0698 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-0473 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2023-0727SE47 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12948-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2023-0044.html · Security Note
• https://ubuntu.com/security/CVE-2023-0705 · Vendor Advisory
• https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop_24.html · Vendor Advisory
• https://osv.dev/vulnerability/USN-5881-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-0701 · Vendor Advisory