Lucene search

K
ubuntucveUbuntu.comUB:CVE-2016-5172
HistorySep 25, 2016 - 12:00 a.m.

CVE-2016-5172

2016-09-2500:00:00
ubuntu.com
ubuntu.com
11

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

0.009 Low

EPSS

Percentile

83.0%

The parser in Google V8, as used in Google Chrome before 53.0.2785.113,
mishandles scopes, which allows remote attackers to obtain sensitive
information from arbitrary memory locations via crafted JavaScript code.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchchromium-browser< 53.0.2785.143-0ubuntu0.14.04.1.1142UNKNOWN
ubuntu16.04noarchchromium-browser< 53.0.2785.143-0ubuntu0.16.04.1.1254UNKNOWN
ubuntu16.10noarchchromium-browser< 53.0.2785.143-0ubuntu1.1307UNKNOWN
ubuntu14.04noarchoxide-qt< 1.17.9-0ubuntu0.14.04.1UNKNOWN
ubuntu16.04noarchoxide-qt< 1.17.9-0ubuntu0.16.04.1UNKNOWN
ubuntu16.10noarchoxide-qt< 1.17.9-0ubuntu1UNKNOWN

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

0.009 Low

EPSS

Percentile

83.0%