PublicDateAtUSN: 2016-12-06 Candidate: CVE-2016-5215 PublicDate: 2017-01-19 05:59:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5215 https://googlechromereleases.blogspot.com/2016/12/stable-channel-update-for-desktop.html https://ubuntu.com/security/notices/USN-3153-1 Description: A use after free in webaudio in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Looben Yang Assigned-to: CVSS: nvd: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L [6.3 MEDIUM] Patches_chromium-browser: upstream_chromium-browser: released (55.0.2883.75) precise_chromium-browser: ignored trusty_chromium-browser: released (58.0.3029.81-0ubuntu0.14.04.1172) trusty/esm_chromium-browser: DNE (trusty was released [58.0.3029.81-0ubuntu0.14.04.1172]) vivid/ubuntu-core_chromium-browser: DNE vivid/stable-phone-overlay_chromium-browser: DNE xenial_chromium-browser: released (55.0.2883.87-0ubuntu0.16.04.1263) yakkety_chromium-browser: released (55.0.2883.87-0ubuntu0.16.10.1328) zesty_chromium-browser: released (55.0.2883.87-0ubuntu1) devel_chromium-browser: released (55.0.2883.87-0ubuntu1) Patches_oxide-qt: upstream_oxide-qt: released (1.19.4) precise_oxide-qt: DNE trusty_oxide-qt: released (1.19.4-0ubuntu0.14.04.1) trusty/esm_oxide-qt: DNE (trusty was released [1.19.4-0ubuntu0.14.04.1]) vivid/ubuntu-core_oxide-qt: DNE vivid/stable-phone-overlay_oxide-qt: released (1.19.7-0ubuntu0.15.04.1~overlay1) xenial_oxide-qt: released (1.19.4-0ubuntu0.16.04.1) esm-infra/xenial_oxide-qt: released (1.19.4-0ubuntu0.16.04.1) yakkety_oxide-qt: released (1.19.4-0ubuntu0.16.10.1) zesty_oxide-qt: released (1.19.6-0ubuntu2) devel_oxide-qt: released (1.19.6-0ubuntu2)