CVE-2017-15396
Fixed in a distro release EPSS 2%
A stack buffer overflow in NumberingSystem in International Components for Unicode (ICU) for C/C++ before 60.2, as used in V8 in Google Chrome prior to 62.0.3202.75 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Products: google chrome, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_workstation, debian_linux, icu-project international_components_for_unicode
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | chromium | 62.0.3202.75-1 |
| Debian 9 | chromium-browser | 62.0.3202.75-1~deb9u1 |
| Red Hat rhel extras 6 | chromium-browser | 0:62.0.3202.75-1.el6_9 |
| Red Hat rhel extras 6 | chromium-browser-debuginfo | 0:62.0.3202.75-1.el6_9 |
| SUSE Package Hub 12 SP2 | chromium | 63.0.3239.84-40.1 |
| Ubuntu 14.04 LTS | chromium-browser | 62.0.3202.75-0ubuntu0.14.04.1211 |
| Ubuntu 16.04 LTS | chromium-browser | 62.0.3202.75-0ubuntu0.16.04.1313 |
| Ubuntu 16.04 LTS | libv8-3.14 | no fix |
| Ubuntu 16.04 LTS | oxide-qt | no fix |
| Ubuntu 18.04 LTS | chromium-browser | 62.0.3202.89-0ubuntu1.1386 |
| Ubuntu 18.04 LTS | libv8-3.14 | no fix |
| openSUSE Tumbleweed | chromium | 113.0.5672.92-1.1 |
| openSUSE Tumbleweed | chromium | 93.0.4577.82-1.1 |