CVE-2017-5121
chromium-browser: Inappropriate use of JIT optimisation in V8 in Google Chrome prior to 61.0.3163.100 for Linux, Windows, and Mac allow...
CVE-2017-5121 is fixed in 5 products on 1 platform, first by chromium-browser 61.0.3163.100-0ubuntu1.1378, released April 2, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0529
92nd percentile
Inappropriate use of JIT optimisation in V8 in Google Chrome prior to 61.0.3163.100 for Linux, Windows, and Mac allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page, related to the escape analysis phase.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| chromium-browser · Ubuntu 18.04.6 LTS (bionic) | 61.0.3163.100-0ubuntu1.1378 | chromium-browser 61.0.3163.100-0ubuntu1.1378 | Apr 2, 2018 |
| chromium-browser-l10n · Ubuntu 18.04.6 LTS (bionic) | 61.0.3163.100-0ubuntu1.1378 | chromium-browser-l10n 61.0.3163.100-0ubuntu1.1378 | Apr 2, 2018 |
| chromium-chromedriver · Ubuntu 18.04.6 LTS (bionic) | 61.0.3163.100-0ubuntu1.1378 | chromium-chromedriver 61.0.3163.100-0ubuntu1.1378 | Apr 2, 2018 |
| chromium-codecs-ffmpeg · Ubuntu 18.04.6 LTS (bionic) | 61.0.3163.100-0ubuntu1.1378 | chromium-codecs-ffmpeg 61.0.3163.100-0ubuntu1.1378 | Apr 2, 2018 |
| chromium-codecs-ffmpeg-extra · Ubuntu 18.04.6 LTS (bionic) | 61.0.3163.100-0ubuntu1.1378 | chromium-codecs-ffmpeg-extra 61.0.3163.100-0ubuntu1.1378 | Apr 2, 2018 |