CVE-2017-5038
Fixed in a distro release EPSS 1%
Chrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, which allowed a remote attacker to perform an out of bounds memory read via a crafted Chrome extension.
Products: google chrome, debian_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | chromium | 57.0.2987.98-1 |
| Debian 8 | chromium-browser | 57.0.2987.98-1~deb8u1 |
| Red Hat rhel extras 6 | chromium-browser | 0:57.0.2987.98-1.el6 |
| Red Hat rhel extras 6 | chromium-browser-debuginfo | 0:57.0.2987.98-1.el6 |
| SUSE Package Hub 12 SP2 | chromium | 57.0.2987.98-8.1 |
| Ubuntu 14.04 LTS | chromium-browser | 58.0.3029.81-0ubuntu0.14.04.1172 |
| Ubuntu 16.04 LTS | chromium-browser | 57.0.2987.98-0ubuntu0.16.04.1276 |