CVE-2017-15398

A stack buffer overflow in the QUIC networking stack in Google Chrome prior to 62.0.3202.89 allowed a remote attacker to gain code execution via a malicious…

published August 28, 2018

CVSS
—
EPSS
4%
Percentile
90.1
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack buffer overflow lurks in the QUIC networking stack of older Google Chrome versions! 🚨 Think of it like a crowded elevator where someone pushes too many buttons, causing the entire system to jam — that’s what happens when the buffer overloads, potentially allowing an attacker to take control. With this vulnerability, a remote attacker could execute arbitrary code on your system via a malicious server. This could lead to anything from unexpected crashes to unauthorized access to your data. It’s like handing your house keys to a stranger without realizing it!

Put simply

Think of it like a crowded elevator where someone pushes too many buttons, causing the entire system to jam — that’s what happens when the buffer overloads, potentially allowing an attacker to take control. This stack buffer overflow occurs in versions of Google Chrome prior to 62.0.3202.89, where an attacker can exploit the QUIC networking stack to gain code execution by sending specially crafted packets.

What to do

With this vulnerability, a remote attacker could execute arbitrary code on your system via a malicious server. This could lead to anything from unexpected crashes to unauthorized access to your data. It’s like handing your house keys to a stranger without realizing it! To mitigate this risk, update Google Chrome to version 62.0.3202.89 or later immediately. Regularly check for updates and enable automatic updates to stay protected against future vulnerabilities. You've got this! Keep your browser updated, and you’ll stay ahead of the threats. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03833 · 90.1th percentile
Published
2018-08-28T20:00Z
EPSS history
Timeline
  • 28 AUG 20:00Z
    A stack buffer overflow in the QUIC networking stack in Google Chrome prior to 62.0.3202.89 allowed a remote attacker to gain code execution via a malicious…
    cvelistv5