CVE-2016-1636

Publication date 5 March 2016

Last updated 24 July 2024

Ubuntu priority

Cvss 3 Severity Score

The PendingScript::notifyFinished function in WebKit/Source/core/dom/PendingScript.cpp in Google Chrome before 49.0.2623.75 relies on memory-cache information about integrity-check occurrences instead of integrity-check successes, which allows remote attackers to bypass the Subresource Integrity (aka SRI) protection mechanism by triggering two loads of the same resource.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
chromium-browser	15.10 wily	Fixed 49.0.2623.87-0ubuntu0.15.10.1.1222
	14.04 LTS trusty	Fixed 49.0.2623.87-0ubuntu0.14.04.1.1112
	12.04 LTS precise	Ignored
oxide-qt	15.10 wily	Fixed 1.13.6-0ubuntu0.15.10.1
	14.04 LTS trusty	Fixed 1.13.6-0ubuntu0.14.04.1
	12.04 LTS precise	Not in release

Severity score breakdown

Parameter	Value
Base score	9.8 · Critical
Attack vector	Network
Attack complexity	Low
Privileges required	None
User interaction	None
Scope	Unchanged
Confidentiality	High
Integrity impact	High
Availability impact	High
Vector	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

Related Ubuntu Security Notices (USN)