UBUNTU-CVE-2015-6764
- Source
- https://ubuntu.com/security/CVE-2015-6764
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2015/UBUNTU-CVE-2015-6764.json
- JSON Data
- https://api.osv.dev/v1/vulns/UBUNTU-CVE-2015-6764
- Upstream
- Published
- 2015-12-06T01:59:00Z
- Modified
- 2025-07-16T07:33:17.656862Z
- Severity
-
- 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Ubuntu - low
- Summary
- [none]
- Details
-
The BasicJsonStringifier::SerializeJSArray function in json-stringifier.h in the JSON stringifier in Google V8, as used in Google Chrome before 47.0.2526.73, improperly loads array elements, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via crafted JavaScript code.
- References
Affected packages
Ubuntu:16.04:LTS / nodejs
Package
- Name
- nodejs
- Purl
- pkg:deb/ubuntu/nodejs@4.2.6~dfsg-1ubuntu4.1?arch=source&distro=xenial
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed4.2.6~dfsg-1ubuntu4.1
Affected versions
0.*
0.10.25~dfsg2-2ubuntu1
4.*
4.2.2~dfsg-1
4.2.3~dfsg-1
4.2.4~dfsg-1ubuntu1
4.2.4~dfsg-2
4.2.6~dfsg-1ubuntu1
4.2.6~dfsg-1ubuntu4
Ecosystem specific
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "nodejs",
"binary_version": "4.2.6~dfsg-1ubuntu4.1"
},
{
"binary_name": "nodejs-dbg",
"binary_version": "4.2.6~dfsg-1ubuntu4.1"
},
{
"binary_name": "nodejs-dbgsym",
"binary_version": "4.2.6~dfsg-1ubuntu4.1"
},
{
"binary_name": "nodejs-dev",
"binary_version": "4.2.6~dfsg-1ubuntu4.1"
},
{
"binary_name": "nodejs-dev-dbgsym",
"binary_version": "4.2.6~dfsg-1ubuntu4.1"
},
{
"binary_name": "nodejs-legacy",
"binary_version": "4.2.6~dfsg-1ubuntu4.1"
}
]
}
Ubuntu:Pro:16.04:LTS / libv8-3.14
Package
- Name
- libv8-3.14
- Purl
- pkg:deb/ubuntu/libv8-3.14@3.14.5.8-5ubuntu2?arch=source&distro=esm-apps/xenial
Ubuntu:18.04:LTS / nodejs
Package
- Name
- nodejs
- Purl
- pkg:deb/ubuntu/nodejs@8.10.0~dfsg-2?arch=source&distro=bionic
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed8.10.0~dfsg-2
Affected versions
6.*
6.11.4~dfsg-1ubuntu1
6.11.4~dfsg-1ubuntu2
6.12.0~dfsg-1ubuntu1
6.12.0~dfsg-2ubuntu1
6.12.0~dfsg-2ubuntu2
Ecosystem specific
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "nodejs",
"binary_version": "8.10.0~dfsg-2"
},
{
"binary_name": "nodejs-dbgsym",
"binary_version": "8.10.0~dfsg-2"
},
{
"binary_name": "nodejs-dev",
"binary_version": "8.10.0~dfsg-2"
},
{
"binary_name": "nodejs-doc",
"binary_version": "8.10.0~dfsg-2"
}
]
}