CVE-2018-16067: Use After Free

Q: Who is exposed to this issue?

Users of Google Chrome versions earlier than 69.0.3497.81 are exposed when they browse attacker-controlled web content. The affected software list also includes Chromium browser packages for Debian and Red Hat Enterprise Linux systems.

Q: What does an attacker need to exploit it?

An attacker can attempt exploitation remotely by persuading a user to open a crafted HTML page. The CVSS vector indicates no prior privileges are required, but user interaction is required.

Q: How can I determine whether a Chrome installation is affected?

Check the installed Google Chrome version. Versions prior to 69.0.3497.81 are affected; the provided data does not specify corresponding fixed package versions for the listed Debian or Red Hat Chromium packages.

Published Sep 5, 2018

Updated

A use after free in WebAudio in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Other sources

An out of bounds read flaw was found in the WebAudio component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=860522

External References:

https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html

— Red Hat

Affected Software

7 affected componentsFixes available

debian/chromium-browser

redhat/chromium-browser<69.0.3497.81

69.0.3497.81

Google Chrome<69.0.3497.81

Debian Debian Linux=9.0

redhat Enterprise Linux Desktop=6.0

redhat Enterprise Linux Server=6.0

redhat Enterprise Linux Workstation=6.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade redhat/chromium-browser to a version that resolves this vulnerability.
Fixed in 69.0.3497.81
Upgrade
Upgrade Google Chrome to a version that resolves this vulnerability.
Fixed in 69.0.3497.81

Event History

Jan 9, 2019

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionWeakness

Parent advisories

This vulnerability appears in the following advisories.

DSA-4289

Frequently Asked Questions

Who is exposed to this issue?

Users of Google Chrome versions earlier than 69.0.3497.81 are exposed when they browse attacker-controlled web content. The affected software list also includes Chromium browser packages for Debian and Red Hat Enterprise Linux systems.

What does an attacker need to exploit it?

An attacker can attempt exploitation remotely by persuading a user to open a crafted HTML page. The CVSS vector indicates no prior privileges are required, but user interaction is required.

How can I determine whether a Chrome installation is affected?

Check the installed Google Chrome version. Versions prior to 69.0.3497.81 are affected; the provided data does not specify corresponding fixed package versions for the listed Debian or Red Hat Chromium packages.

CVE-2018-16067: Use After Free

Other sources

Affected Software

Remediation

Event History

Parent advisories

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

How can I determine whether a Chrome installation is affected?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

How can I determine whether a Chrome installation is affected?