A race in the handling of SharedArrayBuffers in WebAssembly in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
07 Nov 2023, 02:59
Type | Values Removed | Values Added |
---|---|---|
References | () https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html - | |
References | () https://www.debian.org/security/2018/dsa-4182 - | |
References | () https://access.redhat.com/errata/RHSA-2018:0484 - | |
References | () https://crbug.com/794091 - | |
References | () http://www.securityfocus.com/bid/103297 - |
Information
Published : 2018-11-14 15:29
Updated : 2024-02-28 16:48
NVD link : CVE-2018-6061
Mitre link : CVE-2018-6061
CVE.ORG link : CVE-2018-6061
JSON object : View
Products Affected
redhat
- enterprise_linux_server
- enterprise_linux_desktop
- enterprise_linux_workstation
debian
- debian_linux
- chrome
CWE
CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')