Описание
Google V8, as used in Google Chrome before 34.0.1847.116, does not properly implement lazy deoptimization, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code, as demonstrated by improper handling of a heap allocation of a number outside the Small Integer (aka smi) range.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| CloudForms Management Engine 5 | ruby193-v8 | Not affected | ||
| OpenShift Enterprise 1 | ruby193-v8 | Not affected | ||
| Red Hat OpenShift Enterprise 2 | v8 | Not affected | ||
| Red Hat OpenStack Platform 3 | ruby193-v8 | Not affected | ||
| Red Hat OpenStack Platform 3 | v8 | Not affected | ||
| Red Hat OpenStack Platform 4 | ruby193-v8 | Not affected | ||
| Red Hat OpenStack Platform 4 | v8 | Not affected | ||
| Red Hat Satellite 6 | v8 | Not affected | ||
| Red Hat Software Collections | v8314-v8 | Not affected | ||
| Red Hat Subscription Asset Manager | ruby193-v8 | Not affected |
Показывать по
Дополнительная информация
Статус:
EPSS
6.8 Medium
CVSS2
Связанные уязвимости
Google V8, as used in Google Chrome before 34.0.1847.116, does not properly implement lazy deoptimization, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code, as demonstrated by improper handling of a heap allocation of a number outside the Small Integer (aka smi) range.
Google V8, as used in Google Chrome before 34.0.1847.116, does not properly implement lazy deoptimization, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code, as demonstrated by improper handling of a heap allocation of a number outside the Small Integer (aka smi) range.
Google V8, as used in Google Chrome before 34.0.1847.116, does not pro ...
Google V8, as used in Google Chrome before 34.0.1847.116, does not properly implement lazy deoptimization, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code, as demonstrated by improper handling of a heap allocation of a number outside the Small Integer (aka smi) range.
Уязвимость браузера Google Chrome, позволяющая злоумышленнику вызвать отказ в обслуживании
EPSS
6.8 Medium
CVSS2