CVE-2017-5117
chromium-browser: Use of an uninitialized value in Skia in Google Chrome prior to 61.0.3163.79 for Linux and Windows allowed a remote a...
CVE-2017-5117 is fixed in 5 products on 1 platform, first by chromium-browser 61.0.3163.100-0ubuntu1.1378, released April 2, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0171
77th percentile
Use of an uninitialized value in Skia in Google Chrome prior to 61.0.3163.79 for Linux and Windows allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| chromium-browser · Ubuntu 18.04.6 LTS (bionic) | 61.0.3163.100-0ubuntu1.1378 | chromium-browser 61.0.3163.100-0ubuntu1.1378 | Apr 2, 2018 |
| chromium-browser-l10n · Ubuntu 18.04.6 LTS (bionic) | 61.0.3163.100-0ubuntu1.1378 | chromium-browser-l10n 61.0.3163.100-0ubuntu1.1378 | Apr 2, 2018 |
| chromium-chromedriver · Ubuntu 18.04.6 LTS (bionic) | 61.0.3163.100-0ubuntu1.1378 | chromium-chromedriver 61.0.3163.100-0ubuntu1.1378 | Apr 2, 2018 |
| chromium-codecs-ffmpeg · Ubuntu 18.04.6 LTS (bionic) | 61.0.3163.100-0ubuntu1.1378 | chromium-codecs-ffmpeg 61.0.3163.100-0ubuntu1.1378 | Apr 2, 2018 |
| chromium-codecs-ffmpeg-extra · Ubuntu 18.04.6 LTS (bionic) | 61.0.3163.100-0ubuntu1.1378 | chromium-codecs-ffmpeg-extra 61.0.3163.100-0ubuntu1.1378 | Apr 2, 2018 |