【漏洞】【OpenHarmony-3.2-Release】 CVE-2023-4863

一、漏洞信息
漏洞编号: CVE-2023-4863
漏洞归属组件: chromium
漏洞归属版本: 99.0.4844.88
CVSS V3.0分值:
BaseScore: 8.8 高危
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
漏洞简述: Google Chrome是美国谷歌（Google）公司的一款Web浏览器。
Google Chrome 116.0.5845.187之前版本存在安全漏洞，该漏洞源于存在堆缓冲区溢出。
漏洞公开时间:
漏洞创建时间: 2023-09-27 17:40:01
漏洞详情参考链接: https://nvd.nist.gov/vuln/detail/CVE-2023-4863

更多参考(点击展开)

链接地址
https://nvd.nist.gov/vuln/detail/CVE-2023-4863
https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_12.html
https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html
https://crbug.com/1479274
https://bugzilla.suse.com/show_bug.cgi?id=1215231
https://en.bandisoft.com/honeyview/history/
https://github.com/webmproject/libwebp/commit/902bc9190331343b2017211debcec8d2ab87e17a
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4863
https://news.ycombinator.com/item?id=37478403
https://security-tracker.debian.org/tracker/CVE-2023-4863
https://stackdiary.com/critical-vulnerability-in-webp-codec-cve-2023-4863/
https://www.bleepingcomputer.com/news/google/google-fixes-another-chrome-zero-day-bug-exploited-in-attacks/
https://www.mozilla.org/en-US/security/advisories/mfsa2023-40/
https://cxsecurity.com/cveshow/CVE-2023-4863/
https://www.auscert.org.au/bulletins/ESB-2023.5207
https://www.debian.org/security/2023/dsa-5496
https://www.debian.org/security/2023/dsa-5497
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OZDGWWMJREPAGKWCJKSCM4WYLANSKIFX/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FYYKLG6CRGEDTNRBSU26EEWAO6D6U645/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PYZV7TMKF4QHZ54SFJX54BDN52VHGGCX/

漏洞分析指导链接:
漏洞数据来源:
其他:
漏洞补丁信息:

详情(点击展开)

影响的包	修复版本	修复补丁	来源
chromium

二、漏洞分析结构反馈
影响性分析说明:
Vulnerability Summary for CVE-2023-4863
openHarmony评分:
受影响版本排查(受影响/不受影响):
1.OpenHarmony-3.0-LTS:
2.OpenHarmony-3.1-Release:
3.OpenHarmony-1.0.1_release:
4.master:
三、漏洞修复
安全公告链接:

感谢提交Issue！关于Issue的交互操作，请访问OpenHarmony社区支持命令清单。如果有问题，请联系 @bigpumpkin @pilipala195 @defeng2020 @leezheng 。如果需要调整订阅PR、Issue的变更状态，请访问链接。

Thanks for submitting the issue. For more commands, please visit OpenHarmony Command List. If you have any questions, please refer to committer @bigpumpkin @pilipala195 @defeng2020 @leezheng for help. If you need to change the subscription of a Pull Request or Issue, please visit the link.

结论:已修复 https://gitee.com/openharmony/web_webview/pulls/1009

OpenHarmony / third_party_chromium
关闭

内容风险标识

评论 (2)

OpenHarmony / third_party_chromium关闭 .gitee-modal { width: 500px !important; }

内容风险标识