CVE-2016-1688 The regexp (aka regular expression) implementation in Google V8 before 5.0.71.40, as used in Google Chrome before 51.0.2704.63, mishandles external string sizes, which allows remote attackers to cause...
MediumCVSS 6.5
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The regexp (aka regular expression) implementation in Google V8 before 5.0.71.40, as used in Google Chrome before 51.0.2704.63, mishandles external string sizes, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted JavaScript code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 15.10 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| openSUSE leap | = 42.1 | No fix listed |
| opensuse | = 13.2 | No fix listed |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
| SUSE linux enterprise | = 12.0 | No fix listed |
| Google Chrome | <= 50.0.2661.102 | No fix listed |
| Google v8 | <= 5.0.71 | No fix listed |
References
- googlechromereleases.blogspot.com
- openSUSE-SU-2016:1430 vendor-advisory
- openSUSE-SU-2016:1433 vendor-advisory
- openSUSE-SU-2016:1496 vendor-advisory
- DSA-3590 vendor-advisory
- 90876 vdb-entry
- 1035981 vdb-entry
- USN-2992-1 vendor-advisory
- RHSA-2016:1190 vendor-advisory
- codereview.chromium.org
- crbug.com
- GLSA-201607-07 vendor-advisory