CVE-2016-1669

The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before 50.0.2661.102, does not properly determine when to expand certain memory allocations, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted JavaScript code.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
ChromeCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 89%
VendorProductVersion
debiandebian_linux
8.0
googlechrome
𝑥
≤ 50.0.2661.87
opensuseopensuse
13.1
googlev8
𝑥
≤ 5.0.71
nodejsnode.js
0.10.0 ≤
𝑥
< 0.10.46
nodejsnode.js
0.12.0 ≤
𝑥
< 0.12.15
nodejsnode.js
4.0.0 ≤
𝑥
≤ 4.1.2
nodejsnode.js
4.2.0 ≤
𝑥
< 4.4.6
nodejsnode.js
5.0.0 ≤
𝑥
< 5.12.0
nodejsnode.js
6.0.0 ≤
𝑥
≤ 6.2.0
canonicalubuntu_linux
14.04
canonicalubuntu_linux
15.10
canonicalubuntu_linux
16.04
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
nodejs
bullseye
12.22.12~dfsg-1~deb11u4
fixed
bullseye (security)
12.22.12~dfsg-1~deb11u5
fixed
bookworm
18.19.0+dfsg-6~deb12u2
fixed
bookworm (security)
18.19.0+dfsg-6~deb12u1
fixed
sid
20.17.0+dfsg-2
fixed
trixie
20.17.0+dfsg-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
chromium-browser
cosmic
Fixed 50.0.2661.102-0ubuntu1.1242
released
bionic
Fixed 50.0.2661.102-0ubuntu1.1242
released
artful
Fixed 50.0.2661.102-0ubuntu1.1242
released
zesty
Fixed 50.0.2661.102-0ubuntu1.1242
released
yakkety
Fixed 50.0.2661.102-0ubuntu1.1242
released
xenial
Fixed 50.0.2661.102-0ubuntu0.16.04.1.1237
released
wily
Fixed 50.0.2661.102-0ubuntu0.15.10.1.1227
released
trusty
Fixed 50.0.2661.102-0ubuntu0.14.04.1.1117
released
precise
ignored
libv8
cosmic
dne
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
wily
dne
trusty
dne
precise
ignored
libv8-3.14
cosmic
ignored
bionic
ignored
artful
ignored
zesty
ignored
yakkety
ignored
xenial
ignored
wily
ignored
trusty
dne
precise
dne
oxide-qt
cosmic
dne
bionic
dne
artful
Fixed 1.14.9-0ubuntu1
released
zesty
Fixed 1.14.9-0ubuntu1
released
yakkety
Fixed 1.14.9-0ubuntu1
released
xenial
Fixed 1.14.9-0ubuntu0.16.04.1
released
wily
Fixed 1.14.9-0ubuntu0.15.10.1
released
trusty
Fixed 1.14.9-0ubuntu0.14.04.1
released
precise
dne
References