Yüksek CVSS 8.8
CVE-2016-5131: Chrome: serbest bırakılmış belleğin kullanımı
Açıklama (NVD)
Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function.
Özet bilgiler
- Ürün
- Google Chrome
- CVSS v3.1
- 8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - EPSS
- %2,25 (yüzdelik 83)
- CWE
- CWE-416
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| google-chrome | — | — | 52.0.2743.82 |
| xmlsoft-libxml2 | — | 2.9.4 | — |
| apple-iphone-os | — | — | 10.0 |
| apple-mac-os-x | — | — | 10.12 |
| apple-tvos | — | — | 10.0 |
| apple-watchos | — | — | 3.0 |
| canonical-ubuntu-linux | 14.04 | 14.04 | — |
| canonical-ubuntu-linux | 16.04 | 16.04 | — |
| redhat-enterprise-linux-desktop | 6.0 | 6.0 | — |
| redhat-enterprise-linux-server | 6.0 | 6.0 | — |
| redhat-enterprise-linux-workstation | 6.0 | 6.0 | — |
| opensuse-leap | 42.1 | 42.1 | — |
| opensuse-opensuse | 13.1 | 13.1 | — |
| opensuse-opensuse | 13.2 | 13.2 | — |
| suse-linux-enterprise | 12.0 | 12.0 | — |
| debian-debian-linux | 8.0 | 8.0 | — |
| debian-debian-linux | 9.0 | 9.0 | — |
Kaynaklar
- NVD kaydı
- googlechromereleases.blogspot.com
- lists.apple.com
- lists.apple.com
- lists.apple.com
- lists.apple.com
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- rhn.redhat.com
- www.debian.org
- www.securityfocus.com
- www.securitytracker.com
- www.securitytracker.com
- www.ubuntu.com
- bugzilla.redhat.com
- codereview.chromium.org
- crbug.com
- security.gentoo.org
- security.gentoo.org
- source.android.com
- support.apple.com
- support.apple.com
- support.apple.com
- CWE-416