CVE-2015-6764
published 2015-12-06CVE-2015-6764: The BasicJsonStringifier::SerializeJSArray function in json-stringifier.h in the JSON stringifier in Google V8, as used in Google Chrome before 47.0.2526.73…
PriorityP339critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
4.69%
90.8th percentile
The BasicJsonStringifier::SerializeJSArray function in json-stringifier.h in the JSON stringifier in Google V8, as used in Google Chrome before 47.0.2526.73, improperly loads array elements, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via crafted JavaScript code.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | xcode | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | nodejs | < nodejs 4.2.3~dfsg-1 (bookworm) | nodejs 4.2.3~dfsg-1 (bookworm) |
| chrome | <= 46.0.2490.86 | — | |
| nodejs | node.js | 4.0.0 – 4.1.2 | — |
| nodejs | node.js | >= 4.2.0 < 4.2.3 | 4.2.3 |
| nodejs | node.js | 5.0.0 – 5.1.1 | — |
| nodejs | nodejs | >= 0 < 4.2.3~dfsg-1 | 4.2.3~dfsg-1 |
| nodejs | nodejs | >= 0 < 4.2.3~dfsg-1 | 4.2.3~dfsg-1 |
| nodejs | nodejs | >= 0 < 4.2.3~dfsg-1 | 4.2.3~dfsg-1 |
| nodejs | nodejs | >= 0 < 4.2.3~dfsg-1 | 4.2.3~dfsg-1 |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv9.8CRITICAL
vendor_debian9.8CRITICAL
vendor_redhat9.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-834c-r2v5-wppq: The BasicJsonStringifier::SerializeJSArray function in json-stringifier
ghsa_unreviewed·2022-05-17
CVE-2015-6764 [HIGH] CWE-119 GHSA-834c-r2v5-wppq: The BasicJsonStringifier::SerializeJSArray function in json-stringifier
The BasicJsonStringifier::SerializeJSArray function in json-stringifier.h in the JSON stringifier in Google V8, as used in Google Chrome before 47.0.2526.73, improperly loads array elements, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via crafted JavaScript code.
OSV
CVE-2015-6764: The BasicJsonStringifier::SerializeJSArray function in json-stringifier
osv·2015-12-06·CVSS 9.8
CVE-2015-6764 [CRITICAL] CVE-2015-6764: The BasicJsonStringifier::SerializeJSArray function in json-stringifier
The BasicJsonStringifier::SerializeJSArray function in json-stringifier.h in the JSON stringifier in Google V8, as used in Google Chrome before 47.0.2526.73, improperly loads array elements, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via crafted JavaScript code.
Apple
CVE-2015-6764: Xcode 8.1
vendor_apple·2016-10-27·CVSS 9.8
CVE-2015-6764 [CRITICAL] CVE-2015-6764: Xcode 8.1
Apple Security Update: About the security content of Xcode 8.1
Product: Xcode
Version: 8.1
CVE: CVE-2015-6764
Component: CVE-2015-6764
Red Hat
v8: unspecified out-of-bounds access vulnerability
vendor_redhat·2015-11-25·CVSS 9.8
CVE-2015-6764 [CRITICAL] v8: unspecified out-of-bounds access vulnerability
v8: unspecified out-of-bounds access vulnerability
The BasicJsonStringifier::SerializeJSArray function in json-stringifier.h in the JSON stringifier in Google V8, as used in Google Chrome before 47.0.2526.73, improperly loads array elements, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via crafted JavaScript code.
Statement: This issue did not affect the versions of nodejs as shipped with Red Hat Enterprise Software Collections version 2, Red Hat OpenStack Platform and Red Hat Openshift Enterprise and Openshift Online as they do not include the vulnerable version of nodejs.
Package: nodejs (OpenShift Enterprise 1) - Not affected
Package: nodejs (Red Hat Enterprise Linux OpenStack Platform 7 (Kilo) Ope
Debian
CVE-2015-6764: nodejs - The BasicJsonStringifier::SerializeJSArray function in json-stringifier.h in the...
vendor_debian·2015·CVSS 9.8
CVE-2015-6764 [CRITICAL] CVE-2015-6764: nodejs - The BasicJsonStringifier::SerializeJSArray function in json-stringifier.h in the...
The BasicJsonStringifier::SerializeJSArray function in json-stringifier.h in the JSON stringifier in Google V8, as used in Google Chrome before 47.0.2526.73, improperly loads array elements, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via crafted JavaScript code.
Scope: local
bookworm: resolved (fixed in 4.2.3~dfsg-1)
bullseye: resolved (fixed in 4.2.3~dfsg-1)
forky: resolved (fixed in 4.2.3~dfsg-1)
sid: resolved (fixed in 4.2.3~dfsg-1)
trixie: resolved (fixed in 4.2.3~dfsg-1)
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2015-6764 v8: unspecified out-of-bounds access vulnerability
bugzilla·2015-11-26·CVSS 9.8
CVE-2015-6764 [CRITICAL] CVE-2015-6764 v8: unspecified out-of-bounds access vulnerability
CVE-2015-6764 v8: unspecified out-of-bounds access vulnerability
An out-of-bounds access vulnerability in Node.js:
An additional bug exists in Node.js, all versions of v4.x and v5.x, whereby an attacker may be able to trigger an out-of-bounds access and/or denial of service if user-supplied JavaScript can be executed by an application, but only under circumstances where an attacker may cause user-supplied JavaScript to be executed within a Node.js application.
Full details of this vulnerability are embargoed until new releases are available on Wednesday the 2nd of December 2015, UTC (Tuesday the 1st of December US time).
The versions reported as vulnerable (4.x and 5.x) are not shipped in any Red Hat product. This bug will be updated with further information when more details are avail
Bugzilla
CVE-2015-8027 nodejs: unspecified denial of service vulnerability
bugzilla·2015-11-26·CVSS 7.5
CVE-2015-8027 [HIGH] CVE-2015-8027 nodejs: unspecified denial of service vulnerability
CVE-2015-8027 nodejs: unspecified denial of service vulnerability
A denial of service flaw was reported in Node.js:
A bug exists in Node.js, all versions of v0.12.x through to v5.x inclusive, whereby an external attacker can cause a denial of service.
Full details of this vulnerability are embargoed until new releases are available on Wednesday the 2nd of December 2015, UTC (Tuesday the 1st of December US time).
The versions reported as vulnerable (0.12.x to 5.x) are not shipped in any Red Hat product. This bug will be updated with further information when more details are available.
External References:
https://nodejs.org/en/blog/vulnerability/cve-2015-8027_cve-2015-6764/
Discussion:
Statement:
This issue did not affect the versions of nodejs as shipped with Red Hat Enterprise So
http://googlechromereleases.blogspot.com/2015/12/stable-channel-update.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.htmlhttp://lists.opensuse.org/opensuse-updates/2016-01/msg00045.htmlhttp://www.debian.org/security/2015/dsa-3415http://www.securityfocus.com/bid/78209http://www.securitytracker.com/id/1034298https://chromium.googlesource.com/v8/v8/+/6df9a1db8c85ab63dee63879456b6027df53fabchttps://code.google.com/p/chromium/issues/detail?id=554946https://codereview.chromium.org/1440223002https://security.gentoo.org/glsa/201603-09http://googlechromereleases.blogspot.com/2015/12/stable-channel-update.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.htmlhttp://lists.opensuse.org/opensuse-updates/2016-01/msg00045.htmlhttp://www.debian.org/security/2015/dsa-3415http://www.securityfocus.com/bid/78209http://www.securitytracker.com/id/1034298https://chromium.googlesource.com/v8/v8/+/6df9a1db8c85ab63dee63879456b6027df53fabchttps://code.google.com/p/chromium/issues/detail?id=554946https://codereview.chromium.org/1440223002https://security.gentoo.org/glsa/201603-09
2015-12-06
Published