CVE-2018-16066: Use After Free
A use after free in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Other sources
An out of bounds read flaw was found in the Blink component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=847570
External References:
https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/chromium-browserto a version that resolves this vulnerability.Fixed in 69.0.3497.81 - Upgrade
Upgrade
Google Chrometo a version that resolves this vulnerability.Fixed in 69.0.3497.81
Event History
Frequently Asked Questions
Does exploitation require an authenticated account or user interaction?
The CVSS vector indicates no privileges are required by the attacker, but user interaction is required. The issue can be triggered through a crafted HTML page.
Which environments should be reviewed for exposure?
Review Google Chrome and Chromium Browser deployments, including Debian Chromium Browser and Red Hat Enterprise Linux Desktop, Server, and Workstation systems listed as affected software.
Is a fix available?
Yes. A patch is available. For Google Chrome, the affected versions are those prior to 69.0.3497.81.