CVE-2016-1646 — chromium-browser - security update

描述

Google Chromium V8 Engine contains an out-of-bounds read vulnerability that allows a remote attacker to cause a denial of service or possibly have another unspecified impact via crafted JavaScript code. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

如何修補 CVE-2016-1646

要修補 CVE-2016-1646,請將受影響套件升級到下列已修補版本。

Debian/chromium-browser—升級至 49.0.2623.108-1~deb8u1 或更新版本

CVE-2016-1646 正在被利用嗎?

是 — CVE-2016-1646 已列入 CISA Known Exploited Vulnerabilities (KEV) 清單,代表正在被實際利用,請立即修補。

受影響套件(1)

from 0, < 49.0.2623.108-1~deb8u1