CVE-2018-16085: Use After Free

Q: What must an attacker do to attempt exploitation?

The attacker must persuade a user to open a crafted HTML page. The CVSS vector indicates the attack can be delivered remotely, requires no privileges, and requires user interaction.

Q: Which systems should be prioritized for review?

Review deployments of Google Chrome and the listed Red Hat and Debian Chromium Browser packages. Google Chrome versions prior to 69.0.3497.81 are identified as affected.

Q: What is the potential impact if exploitation succeeds?

The flaw may allow heap corruption through a use-after-free condition in ResourceCoordinator. The supplied CVSS assessment rates confidentiality, integrity, and availability impact as high.

Published Sep 5, 2018

Updated

A use after free in ResourceCoordinator in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Other sources

An use after free flaw was found in the Memory Instrumentation component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=856578

External References:

https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html

— Red Hat

Affected Software

3 affected componentsFixes available

redhat/chromium-browser<69.0.3497.81

69.0.3497.81

Google Chrome<69.0.3497.81

debian/chromium-browser

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade redhat/chromium-browser to a version that resolves this vulnerability.
Fixed in 69.0.3497.81
Upgrade
Upgrade Google Chrome to a version that resolves this vulnerability.
Fixed in 69.0.3497.81

Event History

Jan 9, 2019

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionWeakness

Parent advisories

This vulnerability appears in the following advisories.

DSA-4289

Frequently Asked Questions

What must an attacker do to attempt exploitation?

The attacker must persuade a user to open a crafted HTML page. The CVSS vector indicates the attack can be delivered remotely, requires no privileges, and requires user interaction.

Which systems should be prioritized for review?

Review deployments of Google Chrome and the listed Red Hat and Debian Chromium Browser packages. Google Chrome versions prior to 69.0.3497.81 are identified as affected.

What is the potential impact if exploitation succeeds?

The flaw may allow heap corruption through a use-after-free condition in ResourceCoordinator. The supplied CVSS assessment rates confidentiality, integrity, and availability impact as high.

CVE-2018-16085: Use After Free

Other sources

Affected Software

Remediation

Event History

Parent advisories

Frequently Asked Questions

What must an attacker do to attempt exploitation?

Which systems should be prioritized for review?

What is the potential impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

What must an attacker do to attempt exploitation?

Which systems should be prioritized for review?

What is the potential impact if exploitation succeeds?