SB2018022337 - Fedora 26 update for qt5-qtwebengine
Published: February 23, 2018 Updated: April 24, 2025
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 29 secuirty vulnerabilities.
1) Out-of-bounds write (CVE-ID: CVE-2017-15407)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.The weakness exists due to out-of-bounds write in QUIC. A remote attacker can trick the victim into visiting a specially crafted website, trigger out-of-bounds write and execute arbitrary code with privileges of the current user.
Successful exploitation of the vulnerability may result in system compromise.
2) Out-of-bounds write (CVE-ID: CVE-2017-15409)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.The weakness exists due to out-of-bounds write in Skia. A remote attacker can trick the victim into visiting a specially crafted website, trigger out-of-bounds write and execute arbitrary code with privileges of the current user.
Successful exploitation of the vulnerability may result in system compromise.
3) Use-after-free error (CVE-ID: CVE-2017-15410)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.The weakness exists due to use-after-free error in PDFium. A remote attacker can trick the victim into visiting a specially crafted website, trigger memory corruption and execute arbitrary code with privileges of the current user.
Successful exploitation of the vulnerability may result in system compromise.
4) Use-after-free error (CVE-ID: CVE-2017-15411)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.The weakness exists due to use-after-free error in PDFium. A remote attacker can trick the victim into visiting a specially crafted website, trigger memory corruption and execute arbitrary code with privileges of the current user.
Successful exploitation of the vulnerability may result in system compromise.
5) Information disclosure (CVE-ID: CVE-2017-15415)
The vulnerability allows a remote attacker to obtain potentially sensitive information.The weakness exists due to pointer information disclosure in IPC call. A remote attacker can trick the victim into visiting a specially crafted website and read arbitrary data from system memory.
Successful exploitation of the vulnerability results in information disclosure.
6) Out-of-bounds read (CVE-ID: CVE-2017-15416)
The vulnerability allows a remote attacker to obtain potentially sensitive information.The weakness exists due to out-of-bounds read in Blink. A remote attacker can trick the victim into visiting a specially crafted website and read arbitrary data from system memory.
Successful exploitation of the vulnerability results in information disclosure.
7) Information disclosure (CVE-ID: CVE-2017-15418)
The vulnerability allows a remote attacker to obtain potentially sensitive information.The weakness exists due to use of uninitialized value in Skia. A remote attacker can trick the victim into visiting a specially crafted website and read arbitrary data from system memory.
Successful exploitation of the vulnerability results in information disclosure.
8) Memory leak (CVE-ID: CVE-2017-15419)
The vulnerability allows a remote attacker to obtain potentially sensitive information.The weakness exists due to cross origin leak of redirect URL in Blink. A remote attacker can trick the victim into visiting a specially crafted website and read arbitrary data from system memory.
Successful exploitation of the vulnerability results in information disclosure.
9) Integer overflow (CVE-ID: CVE-2017-15422)
The vulnerability allows a remote attacker to cause DoS condition on the target system.The weakness exists due to integer overflow in ICU. A remote attacker can trick the victim into visiting a specially crafted website, trigger memory corruption and cause the application to crash.
Successful exploitation of the vulnerability results in denial of service.
10) Security restrictions bypass (CVE-ID: CVE-2017-15423)
The vulnerability allows a remote attacker to bypass security restrictions on the target system.The weakness exists due to an issue with SPAKE implementation in BoringSSL. A remote attacker can trick the victim into visiting a specially crafted website and bypass security restrictions.
11) Spoofing attack (CVE-ID: CVE-2017-15424)
The vulnerability allows a remote attacker to perform spoofing attack.
The vulnerability exists due to URL spoofing in OmniBox. A remote attacker can trick the victim into visiting a specially crafted website and conduct domain spoofing attacks.
Successful exploitation of the vulnerability results in address spoofing.
12) Spoofing attack (CVE-ID: CVE-2017-15425)
The vulnerability allows a remote attacker to perform spoofing attack.
The vulnerability exists due to URL spoofing in OmniBox. A remote attacker can trick the victim into visiting a specially crafted website and conduct domain spoofing attacks.
Successful exploitation of the vulnerability results in address spoofing.
13) Spoofing attack (CVE-ID: CVE-2017-15426)
The vulnerability allows a remote attacker to perform spoofing attack.
The vulnerability exists due to URL spoofing in OmniBox. A remote attacker can trick the victim into visiting a specially crafted website and conduct domain spoofing attacks.
Successful exploitation of the vulnerability results in address spoofing.
14) Use-after-free error (CVE-ID: CVE-2018-6031)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.The weakness exists due use-after-free memory error in PDFium. A remote attacker can trick the victim into visiting a specially crafted website, trigger memory corruption and execute arbitrary code with privileges of the current user.
Successful exploitation of the vulnerability may result in system compromise.
15) Race condition (CVE-ID: CVE-2018-6033)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to race condition when opening downloaded files. A remote attacker can trick the victim into opening a specially crafted file, trigger race condition and execute arbitrary code with privileges of the current user.
Successful exploitation of the vulnerability may result in system compromise.
16) Integer overflow (CVE-ID: CVE-2018-6034)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to integer overflow in Blink. A remote attacker can trick the victim into visiting a specially crafted website, trigger memory corruption and execute arbitrary code with privileges of the current user.
Successful exploitation of the vulnerability may result in system compromise.
17) Integer underflow (CVE-ID: CVE-2018-6036)
The vulnerability allows a remote attacker to cause DoS condition on the target system.The weakness exists due integer underflow in WebAssembly. A remote attacker can trick the victim into visiting a specially crafted website, trigger memory corruption and cause the service to crash.
18) Security restrictions bypass (CVE-ID: CVE-2018-6037)
The vulnerability allows a remote attacker to bypass security restrictions.
The vulnerability exists due to insufficient user gesture requirements in autofill. A remote attacker can trick the victim into visiting a specially crafted website, bypass security restrictions and gain access to system.
19) Heap-based buffer overflow (CVE-ID: CVE-2018-6038)
The vulnerability allows a remote attacker to cause DoS condition on the target system.The weakness exists due heap-based buffer overflow in WebGL. A remote attacker can trick the victim into visiting a specially crafted website, trigger memory corruption and cause the service to crash.
20) Information disclosure (CVE-ID: CVE-2018-6040)
The vulnerability allows a remote attacker to obtain potentially sensitive information on the target system.
The vulnerability exists due to content security policy bypass. A remote attacker can trick the victim into visiting a specially crafted website, bypass security restrictions and read arbitrary files on the target system.
21) Spoofing attack (CVE-ID: CVE-2018-6041)
The vulnerability allows a remote attacker to perform spoofing attack.
The vulnerability exists due to URL spoofing in Navigation. A remote attacker can trick the victim into visiting a specially crafted website and conduct domain spoofing attacks.
Successful exploitation of the vulnerability results in address spoofing.
22) Spoofing attack (CVE-ID: CVE-2018-6042)
The vulnerability allows a remote attacker to perform spoofing attack.
The vulnerability exists due to URL spoofing in OmniBox. A remote attacker can trick the victim into visiting a specially crafted website and conduct domain spoofing attacks.
Successful exploitation of the vulnerability results in address spoofing.
23) Memory leak (CVE-ID: CVE-2018-6047)
The vulnerability allows a remote attacker to obtain potentially sensitive information.The weakness exists due to cross origin leak of redirect URL in in WebGL. A remote attacker can trick the victim into visiting a specially crafted website and read important data from system memory.
24) Security restrictions bypass (CVE-ID: CVE-2018-6048)
The vulnerability allows a remote attacker to bypass security restrictions.
The vulnerability exists due to insufficient validation of user-supplied input. A remote attacker can trick the victim into visiting a specially crafted website, bypass referrer policy in Blink and gain access to system.
25) Spoofing attack (CVE-ID: CVE-2018-6050)
The vulnerability allows a remote attacker to perform spoofing attack.
The vulnerability exists due to URL spoofing in OmniBox. A remote attacker can trick the victim into visiting a specially crafted website and conduct domain spoofing attacks.
Successful exploitation of the vulnerability results in address spoofing.
26) Memory leak (CVE-ID: CVE-2018-6051)
The vulnerability allows a remote attacker to obtain potentially sensitive information.
The vulnerability exists due to referrer leak in XSS Auditor. A remote attacker can trick the victim into visiting a specially crafted website and read arbitrary files on the target system.
27) Security restrictions bypass (CVE-ID: CVE-2018-6052)
The vulnerability allows a remote attacker to bypass security restrictions.
The vulnerability exists due to incomplete no-referrer policy implementation. A remote attacker can trick the victim into visiting a specially crafted website, bypass security restrictions and gain access to system.
28) Memory leak (CVE-ID: CVE-2018-6053)
The vulnerability allows a remote attacker to obtain potentially sensitive information.
The vulnerability exists due to leak of page thumbnails in New Tab Page. A remote attacker can trick the victim into visiting a specially crafted website and read arbitrary files on the target system.
29) Use-after-free error (CVE-ID: CVE-2018-6054)
The vulnerability allows a remote attacker to cause DoS condition on the target system.The weakness exists due use-after-free memory error in WebUI. A remote attacker can trick the victim into visiting a specially crafted website, trigger memory corruption and cause the service to crash.
Remediation
Install update from vendor's website.