Описание
Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly store internationalization metadata, which allows remote attackers to bypass intended access restrictions by leveraging "type confusion" and reading property values, related to i18n.js and runtime.cc.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| CloudForms Management Engine 5 | ruby193-v8 | Not affected | ||
| OpenShift Enterprise 1 | ruby193-v8 | Not affected | ||
| Red Hat OpenShift Enterprise 2 | v8 | Not affected | ||
| Red Hat OpenStack Platform 3 | ruby193-v8 | Not affected | ||
| Red Hat OpenStack Platform 3 | v8 | Not affected | ||
| Red Hat OpenStack Platform 4 | ruby193-v8 | Not affected | ||
| Red Hat OpenStack Platform 4 | v8 | Not affected | ||
| Red Hat Satellite 6 | v8 | Not affected | ||
| Red Hat Software Collections | v8314-v8 | Not affected | ||
| Red Hat Subscription Asset Manager | ruby193-v8 | Not affected |
Показывать по
Дополнительная информация
Статус:
EPSS
4.3 Medium
CVSS2
Связанные уязвимости
Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly store internationalization metadata, which allows remote attackers to bypass intended access restrictions by leveraging "type confusion" and reading property values, related to i18n.js and runtime.cc.
Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly store internationalization metadata, which allows remote attackers to bypass intended access restrictions by leveraging "type confusion" and reading property values, related to i18n.js and runtime.cc.
Google V8, as used in Google Chrome before 34.0.1847.131 on Windows an ...
Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly store internationalization metadata, which allows remote attackers to bypass intended access restrictions by leveraging "type confusion" and reading property values, related to i18n.js and runtime.cc.
Уязвимость браузера Google Chrome, позволяющая злоумышленнику обойти ограничения доступа
EPSS
4.3 Medium
CVSS2