Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 488
Alerts This Week
Warning Icon 1 488

Red Hat OpenStack 10.0 RHSA-2017:0882-01 Moderate: v8 Integer Overflow

red hat
Calendar Grey April 5, 2017
Scroller Redhat
A recent announcement for v9 concerning CentOS OpenStack Platform: the security risk is classified as moderate according to advisory CNSA-2018:0451-02.
An update for v8 is now available for Red Hat OpenStack Platform 10.0 (Newton)

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Summary

V8 is Google's open source JavaScript engine. V8 is written in C++ and is used in Google Chrome, the open source browser from Google. V8 implements ECMAScript as specified in ECMA-262, 3rd edition.
Security Fix(es):
* An integer-overflow flaw was found in V8's Zone class when allocating new memory (Zone::New() and Zone::NewExpand()). An attacker with the ability to manipulate a large zone could crash the application or, potentially, execute arbitrary code with the application privileges. (CVE-2016-1669)

Topics%20covered

Topics Covered

security advisory Red Hat security fix moderate impact integer overflow OpenStack v8

References

https://access.redhat.com/security/cve/CVE-2016-1669 https://access.redhat.com/security/updates/classification/#moderate

Package List

Red Hat OpenStack Platform 10.0:
Source: v8-3.14.5.10-19.el7ost.src.rpm
x86_64: v8-3.14.5.10-19.el7ost.x86_64.rpm v8-debuginfo-3.14.5.10-19.el7ost.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/


Advisory ID: RHSA-2017:0882-01
Product: Red Hat Enterprise Linux OpenStack Platform
Advisory URL: https://access.redhat.com/errata/RHSA-2017:0882
Issue date: 2017-04-05

Topic

An update for v8 is now available for Red Hat OpenStack Platform 10.0(Newton).Red Hat Product Security has rated this update as having a security impactof Moderate. A Common Vulnerability Scoring System (CVSS) base score, whichgives a detailed severity rating, is available for each vulnerability fromthe CVE link(s) in the References section.

Topics%20covered

Topics Covered

security advisory Red Hat security fix moderate impact integer overflow OpenStack v8

Relevant Releases Architectures

Red Hat OpenStack Platform 10.0 - x86_64

Bugs Fixed

1335449 - CVE-2016-1669 V8: integer overflow leading to buffer overflow in Zone::New

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.