logo

Database

Improper resource allocation In nodejs

Description

The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before 50.0.2661.102, does not properly determine when to expand certain memory allocations, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted JavaScript code.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2016-16692. NVD-2016-16693. OSV-DEBIAN-2016-16694. OSV-2016-16695. GCVE-2016-16696. SECURITY-TRACKER-CVE-2016-16697. rhn.redhat.com8. rhn.redhat.com9. DEBIAN-dsa-359010. ubuntu.com11. access.redhat.com12. access.redhat.com13. access.redhat.com14. access.redhat.com15. access.redhat.com16. security.gentoo.org

References

1. http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00043.html2. http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00050.html3. http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html4. http://lists.opensuse.org/opensuse-updates/2016-07/msg00063.html5. http://www.securityfocus.com/bid/905846. http://www.securitytracker.com/id/10358727. https://codereview.chromium.org/19453130028. https://crbug.com/6061159. https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c0534754110. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CITS5GIUTNWVSUXMSORIAJJLQBEGL2CK/11. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZPTKXI62OPCJCJGCSFMST4HIBQ27J72W/12. http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.