Linux Distros Unpatched Vulnerability : CVE-2018-6406

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The function ParseVP9SuperFrameIndex in common/libwebmutil.cc in libwebm through 2018-01-30 does not validate the childframelength data obtained from a .webm...

openSUSE Security Update : chromium (openSUSE-2018-128)

This update for chromium to version 64.0.3282.140 fixes the following security issues : - CVE-2018-6406: Various asan fixes boo1078463, boo1079021 The regular expression library re2 was updated to 2018-02-01. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

OPENSUSE-SU-2018:0359-1 Security update for chromium

This update for chromium to version 64.0.3282.140 fixes the following security issues: - CVE-2018-6406: Various asan fixes boo1078463, boo1079021 The regular expression library re2 was updated to 2018-02-01...

OPENSUSE-SU-2018:0360-1 Security update for chromium

This update for chromium to version 64.0.3282.140 fixes the following security issues: - CVE-2018-6406: Various asan fixes boo1078463, boo1079021 The regular expression library re2 was updated to 2018-02-01...

KLA11188 Unspecified vulnerability in Google Chrome

Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service and perform unspecified attacks. Below is a complete list of vulnerabilities: 1. A data validation vulnerability in the...

CVE-2018-6406

The function ParseVP9SuperFrameIndex in common/libwebmutil.cc in libwebm through 2018-01-30 does not validate the childframelength data obtained from a .webm file, which allows remote attackers to cause an information leak or a denial of service heap-based buffer over-read and later out-of-bounds...

CVE-2018-6406

CVE-2018-6406 affects libwebm: the ParseVP9SuperFrameIndex function in common/libwebm_util.cc does not validate child_frame_length from a .webm file, allowing remote attackers to cause information leaks or a denial of service via a heap-based buffer over-read and subsequent out-of-bounds write. T...