Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 433
Alerts This Week
Warning Icon 1 433

Debian Stretch DSA-3985-1 Critical: Chromium Buffer Overflow Advisories

debian
Calendar Grey September 28, 2017
Debian Logo
The Debian security announcement DSA-3985-1 details crucial updates for the chromium browser, targeting vulnerabilities related to buffer overflow and memory management.
Several vulnerabilities have been discovered in the chromium web browser
Topics%20covered

Topics Covered

security advisory buffer overflow debian memory access type confusion

Summary

CVE-2017-5111

Luat Nguyen discovered a use-after-free issue in the pdfium library.

CVE-2017-5112

Tobias Klein discovered a buffer overflow issue in the webgl
library.

CVE-2017-5113

A buffer overflow issue was discovered in the skia library.

CVE-2017-5114

Ke Liu discovered a memory issue in the pdfium library.

CVE-2017-5115

Marco Giovannini discovered a type confusion issue in the v8
javascript library.

CVE-2017-5116

Guang Gong discovered a type confusion issue in the v8 javascript
library.

CVE-2017-5117

Tobias Klein discovered an uninitialized value in the skia library.

CVE-2017-5118

WenXu Wu discovered a way to bypass the Content Security Policy.

CVE-2017-5119

Another uninitialized value was discovered in the skia library.

CVE-2017-5120

Xiaoyin Liu discovered a way downgrade HTTPS connections during
redirection.

CVE-2017-5121

Jordan Rabet discovered an out-of-bounds memory access in the v8
javascript library.

CVE-2017-5122

Choongwoo Han disco...

Read the Full Advisory

Severity
critical
Lowest
Low
Medium
High
Critical

Package: chromium-browser
CVE ID: CVE-2017-5111 CVE-2017-5112 CVE-2017-5113 CVE-2017-5114

Topics%20covered

Topics Covered

security advisory buffer overflow debian memory access type confusion

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.