CVE-2016-5172

The parser in Google V8, as used in Google Chrome before 53.0.2785.113, mishandles scopes, which allows remote attackers to obtain sensitive information from arbitrary memory locations via crafted JavaScript code.

Database specific

{
    "unresolved_ranges": [
        {
            "vendor_product": "google:chrome",
            "cpes": [
                "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "last_affected": "53.0.2785.101"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "vendor_product": "debian:debian_linux",
            "cpes": [
                "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING",
            "extracted_events": [
                {
                    "introduced": "8.0"
                },
                {
                    "last_affected": "8.0"
                },
                {
                    "introduced": "9.0"
                },
                {
                    "last_affected": "9.0"
                }
            ]
        }
    ]
}

References

Affected packages

Git / github.com/nodejs/node

Affected ranges

Type

GIT

Repo

https://github.com/nodejs/node

Events

Introduced

ce3e3c5fe15479475c068482c48eb9cbf1ac9df5

Last affected

c6a397bce63fc026421e1515b98eec9b8b5a8468

Database specific

{
    "cpe": "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
    "extracted_events": [
        {
            "introduced": "6.0.0"
        },
        {
            "last_affected": "6.8.1"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

v6.*

v6.0.0

v6.1.0

v6.2.0

v6.2.1

v6.2.2

v6.3.0

v6.3.1

v6.4.0

v6.5.0

v6.6.0

v6.7.0

v6.8.0

v6.8.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-5172.json"