Heap-based buffer overflow in Google Chrome - CVE-2018-6156

Vulnerability identifier: #VU14035

CSH Severity: High

CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-6156

CWE-ID: CWE-122

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The weakness exists due to heap-based buffer overflow in WebRTC when handling malicious input. A remote attacker can trick the victim into visiting a specially crafted website, trigger memory corruption and execute arbitrary code with elevated privileges.

Successful exploitation of the vulnerability may result in system compromise.

Google Chrome
Mozilla Firefox
Debian Linux
Gentoo Linux
Arch Linux
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Fedora
SUSE Linux
Opensuse
firefox (Ubuntu package)
firefox (Alpine package)
chromium

Update to version 68.0.3440.75.

Google Chrome - update to 68.0.3440.75
firefox (Ubuntu package) - addressed in versions 70.0+build2-0ubuntu0.16.04.1, 70.0+build2-0ubuntu0.18.04.1, 70.0+build2-0ubuntu0.19.04.1, 70.0+build2-0ubuntu0.19.10.1
Mozilla Firefox - update to 70.0
firefox (Alpine package) - update to 72.0.1-r0
chromium - addressed in versions 68.0.3440.106-3.el7, 68.0.3440.106-3.fc27, 68.0.3440.106-3.fc28

• https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html

• Multiple vulnerabilities in Google Chrome
• Debian update for chromium-browser
• SUSE Linux update for chromium
• OpenSUSE Linux update for Chromium
• Red Hat update for Google Chrome
• Gentoo update for Chromium, Google Chrome
• Multiple vulnerabilities in Mozilla Firefox
• Ubuntu update for Firefox
• Arch Linux update for firefox
• Heap-based buffer overflow in firefox (Alpine package)
• Fedora 27 update for chromium
• Fedora 28 update for chromium
• Fedora EPEL 7 update for chromium