Vulnerability CVE-2016-1618: Information

Description

Blink, as used in Google Chrome before 48.0.2564.82, does not ensure that a proper cryptographicallyRandomValues random number generator is used, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors.

Severity: MEDIUM (6.5) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

URL: https://nvd.nist.gov/vuln/detail/CVE-2016-1618
Published: Jan. 25, 2016
Modified: Nov. 7, 2023
Error type identifier: CWE-310, CWE-200

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
chromiumsisyphus47.0.2526.111-alt1124.0.6367.78-alt1ALT-PU-2016-1029-1155937Fixed
chromiump1047.0.2526.111-alt1119.0.6045.159-alt0.p10.1ALT-PU-2016-1029-1155937Fixed
chromiump947.0.2526.111-alt197.0.4692.99-alt0.p9.1ALT-PU-2016-1029-1155937Fixed
chromiumc10f147.0.2526.111-alt1110.0.5481.177-alt1.p10.1ALT-PU-2016-1029-1155937Fixed
chromiumc9f247.0.2526.111-alt184.0.4147.105-alt1.1.p9ALT-PU-2016-1029-1155937Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
81430
    RHSA-2016:0072
      https://code.google.com/p/chromium/issues/detail?id=552749
        USN-2877-1
          http://googlechromereleases.blogspot.com/2016/01/stable-channel-update_20.html
            1034801
              openSUSE-SU-2016:0249
                https://codereview.chromium.org/1419293005
                  GLSA-201603-09
                    openSUSE-SU-2016:0271
                      DSA-3456
                        openSUSE-SU-2016:0250

                            1. Configuration 1

                              cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
                              End including
                              47.0.2526.106
                          VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
                          Version: v24.4.2
                          Back to top