Candidate: CVE-2017-15416 PublicDate: 2018-08-28 19:29:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15416 Description: Heap buffer overflow in Blob API in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka a Blink out-of-bounds read. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: nvd: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N [6.5 MEDIUM] Patches_chromium-browser: upstream_chromium-browser: released (63.0.3239.84) precise/esm_chromium-browser: DNE trusty_chromium-browser: released (63.0.3239.84-0ubuntu0.14.04.1) trusty/esm_chromium-browser: DNE (trusty was released [63.0.3239.84-0ubuntu0.14.04.1]) xenial_chromium-browser: released (63.0.3239.84-0ubuntu0.16.04.1) zesty_chromium-browser: released (63.0.3239.84-0ubuntu0.17.04.1) artful_chromium-browser: released (63.0.3239.84-0ubuntu0.17.10.1) bionic_chromium-browser: released (63.0.3239.84-0ubuntu1) cosmic_chromium-browser: released (63.0.3239.84-0ubuntu1) devel_chromium-browser: released (63.0.3239.84-0ubuntu1) Patches_oxide-qt: upstream_oxide-qt: needs-triage precise/esm_oxide-qt: DNE trusty_oxide-qt: ignored (Ubuntu touch end-of-life) trusty/esm_oxide-qt: DNE (trusty was ignored [Ubuntu touch end-of-life]) xenial_oxide-qt: ignored (Ubuntu touch end-of-life) esm-infra/xenial_oxide-qt: ignored (Ubuntu touch end-of-life) zesty_oxide-qt: ignored (reached end-of-life) artful_oxide-qt: ignored (reached end-of-life) bionic_oxide-qt: DNE cosmic_oxide-qt: DNE devel_oxide-qt: DNE