CVE-2018-17466
Name
CVE-2018-17466
Description
Incorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
NVD Severity
high
Other trackers
CVE
,
NVD
,
CERT
,
CVE Details
,
CIRCL
,
Arch Linux
,
Debian
,
Red Hat
,
Ubuntu
,
Gentoo
,
SUSE (Bugzilla)
,
SUSE (CVE)
,
Mageia
Mailing lists
oss-security
,
full-disclosure
,
bugtraq
Exploits
Exploit DB
,
Metasploit
Forges
GitHub (
code
,
issues
), Aports (
code
,
issues
)
References
Type
URI
Permissions Required
https://crbug.com/880906
Release Notes
https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html
Third Party Advisory
https://www.debian.org/security/2018/dsa-4330
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3004
Third Party Advisory
http://www.securityfocus.com/bid/105666
Third Party Advisory
https://security.gentoo.org/glsa/201811-10
Third Party Advisory
https://usn.ubuntu.com/3844-1/
Third Party Advisory
http://www.securityfocus.com/bid/106168
Third Party Advisory
https://www.debian.org/security/2018/dsa-4354
Mailing List
https://lists.debian.org/debian-lts-announce/2018/12/msg00002.html
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3833
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3831
Third Party Advisory
https://www.debian.org/security/2019/dsa-4362
Third Party Advisory
https://usn.ubuntu.com/3868-1/
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:0160
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:0159
Match rules
CPE URI
Source package
Min version
Max version
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
chrome
>= None
< 70.0.3538.67
Vulnerable and fixed packages
Source package
Branch
Version
Maintainer
Status