Log in Start free

Actively exploited · Published Sep 28, 2023 · Assigned by Chrome

CVE-2023-5217

High 8.8 Exploited

In plain English

A high-severity out-of-bounds write in Chrome from Google. Attackers are actively exploiting it in the wild (listed by CISA on October 2, 2023). The chance it is exploited in the next 30 days is estimated at 49.0% (higher than 99% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.8High
Exploit odds (30 days)49.0%top 1.1% of all CVEs
Exploited in the wildYesCISA KEV since Oct 2, 2023
Attack tooling1Public PoC

CISA guidance

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Federal agencies must remediate by Oct 23, 2023.

Official description

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:9firefox115.3.1-1.el9_2.alma.1ALSA-2023:5434
AlmaLinux:9firefox-x11115.3.1-1.el9_2.alma.1ALSA-2023:5434
AlmaLinux:8libvpx1.7.0-10.el8_8.alma.1ALSA-2023:5537
AlmaLinux:9libvpx1.9.0-7.el9_2.alma.1ALSA-2023:5539
AlmaLinux:8libvpx-devel1.7.0-10.el8_8.alma.1ALSA-2023:5537
AlmaLinux:9libvpx-devel1.9.0-7.el9_2.alma.1ALSA-2023:5539
AlmaLinux:9thunderbird115.3.1-1.el9_2.almaALSA-2023:5435
Alpine:v3.20firefox-esr115.3.1-r0ALPINE-CVE-2023-5217
Alpine:v3.21firefox-esr115.3.1-r0ALPINE-CVE-2023-5217
Alpine:v3.22firefox-esr115.3.1-r0ALPINE-CVE-2023-5217
Alpine:v3.23firefox-esr115.3.1-r0ALPINE-CVE-2023-5217
Alpine:v3.20libvpx1.13.0-r3ALPINE-CVE-2023-5217
Alpine:v3.21libvpx1.13.0-r3ALPINE-CVE-2023-5217
Alpine:v3.22libvpx1.13.0-r3ALPINE-CVE-2023-5217
Alpine:v3.23libvpx1.13.0-r3ALPINE-CVE-2023-5217
Alpine:v3.24libvpx1.13.0-r3ALPINE-CVE-2023-5217
Alpine:v3.20qt5-qtwebengine5.15.15-r3ALPINE-CVE-2023-5217
Alpine:v3.21qt5-qtwebengine5.15.15-r3ALPINE-CVE-2023-5217
Alpine:v3.22qt5-qtwebengine5.15.15-r3ALPINE-CVE-2023-5217
Alpine:v3.23qt5-qtwebengine5.15.15-r3ALPINE-CVE-2023-5217
Debian:12chromium117.0.5938.132-1~deb12u1DEBIAN-CVE-2023-5217
Debian:12chromium117.0.5938.132-1~deb12u1DSA-5508-1
Debian:13chromium117.0.5938.132-1DEBIAN-CVE-2023-5217
Debian:14chromium117.0.5938.132-1DEBIAN-CVE-2023-5217
Debian:12firefox-esrno fix listedDEBIAN-CVE-2023-5217
Debian:13firefox-esrno fix listedDEBIAN-CVE-2023-5217
Debian:14firefox-esrno fix listedDEBIAN-CVE-2023-5217
Debian:12libvpx1.12.0-1+deb12u1DSA-5510-1
Debian:12libvpx1.12.0-1+deb12u1DEBIAN-CVE-2023-5217
Debian:13libvpx1.12.0-1.1DEBIAN-CVE-2023-5217
Debian:14libvpx1.12.0-1.1DEBIAN-CVE-2023-5217
Debian:12thunderbird1:115.3.1-1~deb12u1DEBIAN-CVE-2023-5217
Debian:12thunderbird1:115.3.1-1~deb12u1DSA-5513-1
Debian:13thunderbird1:115.3.1-1DEBIAN-CVE-2023-5217
Debian:14thunderbird1:115.3.1-1DEBIAN-CVE-2023-5217
Rocky Linux:8libvpx0:1.7.0-10.el8_8RLSA-2023:5537
Rocky Linux:8thunderbird0:115.3.1-1.el8_8RLSA-2023:5428
Rocky Linux:9thunderbird0:115.3.1-1.el9_2RLSA-2023:5435
Ubuntu:22.04:LTSlibvpx1.11.0-2ubuntu2.2UBUNTU-CVE-2023-5217
Ubuntu:22.04:LTSlibvpx1.11.0-2ubuntu2.2USN-6403-1
Ubuntu:22.04:LTSmozjs102no fix listedUBUNTU-CVE-2023-5217
Ubuntu:24.04:LTSmozjs102no fix listedUBUNTU-CVE-2023-5217
Ubuntu:22.04:LTSmozjs78no fix listedUBUNTU-CVE-2023-5217
Ubuntu:22.04:LTSmozjs91no fix listedUBUNTU-CVE-2023-5217
Ubuntu:22.04:LTSthunderbird1:115.3.1+build1-0ubuntu0.22.04.2USN-6405-1
Ubuntu:22.04:LTSthunderbird1:115.3.1+build1-0ubuntu0.22.04.2UBUNTU-CVE-2023-5217
Ubuntu:24.04:LTSthunderbird1:115.3.1+build1-0ubuntu1UBUNTU-CVE-2023-5217
npmelectron26.2.4GHSA-qqvq-6xgj-jw8g
npmelectron25.8.4GHSA-qqvq-6xgj-jw8g
npmelectron24.8.5GHSA-qqvq-6xgj-jw8g
npmelectron22.3.25GHSA-qqvq-6xgj-jw8g
npmelectron27.0.0-beta.8GHSA-qqvq-6xgj-jw8g

Affected products (as reported)

VendorProductVersions
Google Chrome 117.0.5938.132 – before 117.0.5938.132
Google libvpx 1.13.1 – before 1.13.1

Weakness: CWE-787 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References