CVE-2024-0519

2024-01-1622:15:37

Alpine Linux Development Team

security.alpinelinux.org

google chrome

memory access

heap corruption

html page

security vulnerability

cve-2024-0519

unix

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

0.002

Percentile

58.9%

JSON

Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

OSVersionArchitecturePackageVersionFilename
Alpineedge-communitynoarchqt5-qtwebengine< 5.15.16-r5UNKNOWN
Alpineedge-communitynoarchqt6-qtwebengine< 6.6.1-r5UNKNOWN
Alpine3.19-communitynoarchqt5-qtwebengine< 5.15.16-r3UNKNOWN
Alpine3.19-communitynoarchqt6-qtwebengine< 6.6.1-r5UNKNOWN
Alpine3.20-communitynoarchqt5-qtwebengine< 5.15.16-r5UNKNOWN
Alpine3.20-communitynoarchqt6-qtwebengine< 6.6.1-r5UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	edge-community	noarch	qt5-qtwebengine	< 5.15.16-r5	UNKNOWN
Alpine	edge-community	noarch	qt6-qtwebengine	< 6.6.1-r5	UNKNOWN
Alpine	3.19-community	noarch	qt5-qtwebengine	< 5.15.16-r3	UNKNOWN
Alpine	3.19-community	noarch	qt6-qtwebengine	< 6.6.1-r5	UNKNOWN
Alpine	3.20-community	noarch	qt5-qtwebengine	< 5.15.16-r5	UNKNOWN
Alpine	3.20-community	noarch	qt6-qtwebengine	< 6.6.1-r5	UNKNOWN