ByteOS Network

Vulnerability Details :

CVE-2016-1688

Assigner-Chrome

Assigner Org ID-ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28

Published At-05 Jun, 2016 | 23:00

Updated At-05 Aug, 2024 | 23:02

The regexp (aka regular expression) implementation in Google V8 before 5.0.71.40, as used in Google Chrome before 51.0.2704.63, mishandles external string sizes, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted JavaScript code.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:Chrome

Assigner Org ID:ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28

Published At:05 Jun, 2016 | 23:00

Updated At:05 Aug, 2024 | 23:02

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.securityfocus.com/bid/90876	vdb-entry x_refsource_BID
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html	vendor-advisory x_refsource_SUSE
http://www.securitytracker.com/id/1035981	vdb-entry x_refsource_SECTRACK
http://www.debian.org/security/2016/dsa-3590	vendor-advisory x_refsource_DEBIAN
https://crbug.com/604897	x_refsource_CONFIRM
http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2992-1	vendor-advisory x_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html	vendor-advisory x_refsource_SUSE
https://access.redhat.com/errata/RHSA-2016:1190	vendor-advisory x_refsource_REDHAT
https://codereview.chromium.org/1927003003	x_refsource_CONFIRM
https://security.gentoo.org/glsa/201607-07	vendor-advisory x_refsource_GENTOO
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html	vendor-advisory x_refsource_SUSE

Hyperlink: http://www.securityfocus.com/bid/90876

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://www.securitytracker.com/id/1035981

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://www.debian.org/security/2016/dsa-3590

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: https://crbug.com/604897

Resource:

x_refsource_CONFIRM

Hyperlink: http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.ubuntu.com/usn/USN-2992-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: https://access.redhat.com/errata/RHSA-2016:1190

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://codereview.chromium.org/1927003003

Resource:

x_refsource_CONFIRM

Hyperlink: https://security.gentoo.org/glsa/201607-07

Resource:

vendor-advisory

x_refsource_GENTOO

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html

Resource:

vendor-advisory

x_refsource_SUSE

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.securityfocus.com/bid/90876	vdb-entry x_refsource_BID x_transferred
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html	vendor-advisory x_refsource_SUSE x_transferred
http://www.securitytracker.com/id/1035981	vdb-entry x_refsource_SECTRACK x_transferred
http://www.debian.org/security/2016/dsa-3590	vendor-advisory x_refsource_DEBIAN x_transferred
https://crbug.com/604897	x_refsource_CONFIRM x_transferred
http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html	x_refsource_CONFIRM x_transferred
http://www.ubuntu.com/usn/USN-2992-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html	vendor-advisory x_refsource_SUSE x_transferred
https://access.redhat.com/errata/RHSA-2016:1190	vendor-advisory x_refsource_REDHAT x_transferred
https://codereview.chromium.org/1927003003	x_refsource_CONFIRM x_transferred
https://security.gentoo.org/glsa/201607-07	vendor-advisory x_refsource_GENTOO x_transferred
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html	vendor-advisory x_refsource_SUSE x_transferred

Hyperlink: http://www.securityfocus.com/bid/90876

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://www.securitytracker.com/id/1035981

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://www.debian.org/security/2016/dsa-3590

Resource:

vendor-advisory

x_refsource_DEBIAN

x_transferred

Hyperlink: https://crbug.com/604897

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.ubuntu.com/usn/USN-2992-1

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2016:1190

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: https://codereview.chromium.org/1927003003

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://security.gentoo.org/glsa/201607-07

Resource:

vendor-advisory

x_refsource_GENTOO

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:chrome-cve-admin@google.com

Published At:05 Jun, 2016 | 23:59

Updated At:12 Apr, 2025 | 10:46

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	6.5	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Primary	2.0	4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:N/A:P

Type: Primary

Version: 3.0

Base score: 6.5

Base severity: MEDIUM

Vector:

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Type: Primary

Version: 2.0

Base score: 4.3

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:N/C:N/I:N/A:P

CPE Matches

Canonical Ltd.

>>ubuntu_linux>>14.04

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

Canonical Ltd.

>>ubuntu_linux>>15.10

cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*

Canonical Ltd.

>>ubuntu_linux>>16.04

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

Debian GNU/Linux

>>debian_linux>>8.0

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

openSUSE

>>leap>>42.1

cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*

openSUSE

>>opensuse>>13.2

cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_desktop>>6.0

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_server>>6.0

cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_workstation>>6.0

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

SUSE

>>linux_enterprise>>12.0

cpe:2.3:o:suse:linux_enterprise:12.0:*:*:*:*:*:*:*

Google LLC

>>chrome>>Versions up to 50.0.2661.102(inclusive)

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Google LLC

>>v8>>Versions up to 5.0.71(inclusive)

cpe:2.3:a:google:v8:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov

CWE ID: CWE-119

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html	chrome-cve-admin@google.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html	chrome-cve-admin@google.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html	chrome-cve-admin@google.com	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html	chrome-cve-admin@google.com	N/A
http://www.debian.org/security/2016/dsa-3590	chrome-cve-admin@google.com	N/A
http://www.securityfocus.com/bid/90876	chrome-cve-admin@google.com	N/A
http://www.securitytracker.com/id/1035981	chrome-cve-admin@google.com	N/A
http://www.ubuntu.com/usn/USN-2992-1	chrome-cve-admin@google.com	N/A
https://access.redhat.com/errata/RHSA-2016:1190	chrome-cve-admin@google.com	N/A
https://codereview.chromium.org/1927003003	chrome-cve-admin@google.com	N/A
https://crbug.com/604897	chrome-cve-admin@google.com	N/A
https://security.gentoo.org/glsa/201607-07	chrome-cve-admin@google.com	N/A
http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.debian.org/security/2016/dsa-3590	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/90876	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securitytracker.com/id/1035981	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.ubuntu.com/usn/USN-2992-1	af854a3a-2127-422b-91ae-364da2661108	N/A
https://access.redhat.com/errata/RHSA-2016:1190	af854a3a-2127-422b-91ae-364da2661108	N/A
https://codereview.chromium.org/1927003003	af854a3a-2127-422b-91ae-364da2661108	N/A
https://crbug.com/604897	af854a3a-2127-422b-91ae-364da2661108	N/A
https://security.gentoo.org/glsa/201607-07	af854a3a-2127-422b-91ae-364da2661108	N/A