CVE catalog

CVE-2017-5118

UBUNTU-CVE-2017-5118

[CVE catalog]

Severity
Medium · CVSS 6.5CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.13% · Oct 25, 2026

Blink in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, failed to correctly propagate CSP restrictions to javascript scheme pages, which allowed a remote attacker to bypass content security policy via a crafted HTML page.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntuchromium-browser14.0429.0.1547.65-0ubuntu2vulnerable
Ubuntuchromium-browser14.0431.0.1650.63-0ubuntu1~20131204.1vulnerable
Ubuntuchromium-browser14.0432.0.1700.107-0ubuntu1~20140204.977.1vulnerable
Ubuntuchromium-browser14.0433.0.1750.152-0ubuntu1~pkg995.1vulnerable
Ubuntuchromium-browser14.0434.0.1847.116-0ubuntu2vulnerable
Ubuntuchromium-browser14.0436.0.1985.125-0ubuntu1.14.04.0~pkg1029vulnerable
Ubuntuchromium-browser14.0437.0.2062.94-0ubuntu0.14.04.1~pkg1042vulnerable
Ubuntuchromium-browser14.0437.0.2062.120-0ubuntu0.14.04.1~pkg1049vulnerable
Ubuntuchromium-browser14.0438.0.2125.111-0ubuntu0.14.04.1.1061vulnerable
Ubuntuchromium-browser14.0439.0.2171.65-0ubuntu0.14.04.1.1064vulnerable
Ubuntuchromium-browser14.0440.0.2214.94-0ubuntu0.14.04.1.1068vulnerable
Ubuntuchromium-browser14.0440.0.2214.111-0ubuntu0.14.04.1.1069vulnerable
Ubuntuchromium-browser14.0441.0.2272.76-0ubuntu0.14.04.1.1076vulnerable
Ubuntuchromium-browser14.0443.0.2357.81-0ubuntu0.14.04.1.1089vulnerable
Ubuntuchromium-browser14.0443.0.2357.130-0ubuntu0.14.04.1.1092vulnerable
Ubuntuchromium-browser14.0444.0.2403.89-0ubuntu0.14.04.1.1095vulnerable
Ubuntuchromium-browser14.0445.0.2454.85-0ubuntu0.14.04.1.1097vulnerable
Ubuntuchromium-browser14.0445.0.2454.101-0ubuntu0.14.04.1.1099vulnerable
Ubuntuchromium-browser14.0447.0.2526.73-0ubuntu0.14.04.1.1106vulnerable
Ubuntuchromium-browser14.0447.0.2526.106-0ubuntu0.14.04.1.1107vulnerable
Ubuntuchromium-browser14.0448.0.2564.82-0ubuntu0.14.04.1.1108vulnerable
Ubuntuchromium-browser14.0448.0.2564.116-0ubuntu0.14.04.1.1111vulnerable
Ubuntuchromium-browser14.0449.0.2623.87-0ubuntu0.14.04.1.1112vulnerable
Ubuntuchromium-browser14.0449.0.2623.108-0ubuntu0.14.04.1.1113vulnerable
Ubuntuchromium-browser14.0450.0.2661.102-0ubuntu0.14.04.1.1117vulnerable
Ubuntuchromium-browser14.0451.0.2704.79-0ubuntu0.14.04.1.1121vulnerable
Ubuntuchromium-browser14.0452.0.2743.116-0ubuntu0.14.04.1.1134vulnerable
Ubuntuchromium-browser14.0453.0.2785.143-0ubuntu0.14.04.1.1142vulnerable
Ubuntuchromium-browser14.0453.0.2785.143-0ubuntu0.14.04.1.1145vulnerable
Ubuntuchromium-browser14.0458.0.3029.81-0ubuntu0.14.04.1172vulnerable
Ubuntuchromium-browser14.0458.0.3029.96-0ubuntu0.14.04.1174vulnerable
Ubuntuchromium-browser14.0458.0.3029.110-0ubuntu0.14.04.1176vulnerable
Ubuntuchromium-browser14.0459.0.3071.109-0ubuntu0.14.04.1186vulnerable
Ubuntuchromium-browser14.0459.0.3071.109-0ubuntu0.14.04.1188vulnerable
Ubuntuchromium-browser14.0460.0.3112.78-0ubuntu0.14.04.1190vulnerable
Ubuntuchromium-browser14.0460.0.3112.113-0ubuntu0.14.04.1194vulnerable
Ubuntuchromium-browser14.0461.0.3163.79-0ubuntu0.14.04.1196vulnerable
Ubuntuchromium-browser14.0461.0.3163.100-0ubuntu0.14.04.1202fixed
Ubuntuchromium-browser16.0445.0.2454.101-0ubuntu1.1201vulnerable
Ubuntuchromium-browser16.0447.0.2526.73-0ubuntu1.1218vulnerable
Ubuntuchromium-browser16.0447.0.2526.106-0ubuntu1.1221vulnerable
Ubuntuchromium-browser16.0448.0.2564.82-0ubuntu1.1222vulnerable
Ubuntuchromium-browser16.0448.0.2564.116-0ubuntu1.1229vulnerable
Ubuntuchromium-browser16.0449.0.2623.87-0ubuntu1.1232vulnerable
Ubuntuchromium-browser16.0449.0.2623.108-0ubuntu1.1233vulnerable
Ubuntuchromium-browser16.0450.0.2661.102-0ubuntu0.16.04.1.1237vulnerable
Ubuntuchromium-browser16.0451.0.2704.79-0ubuntu0.16.04.1.1242vulnerable
Ubuntuchromium-browser16.0452.0.2743.116-0ubuntu0.16.04.1.1250vulnerable
Ubuntuchromium-browser16.0453.0.2785.143-0ubuntu0.16.04.1.1254vulnerable
Ubuntuchromium-browser16.0453.0.2785.143-0ubuntu0.16.04.1.1257vulnerable
Ubuntuchromium-browser16.0455.0.2883.87-0ubuntu0.16.04.1263vulnerable
Ubuntuchromium-browser16.0456.0.2924.76-0ubuntu0.16.04.1268vulnerable
Ubuntuchromium-browser16.0457.0.2987.98-0ubuntu0.16.04.1276vulnerable
Ubuntuchromium-browser16.0458.0.3029.81-0ubuntu0.16.04.1277vulnerable
Ubuntuchromium-browser16.0458.0.3029.96-0ubuntu0.16.04.1279vulnerable
Ubuntuchromium-browser16.0458.0.3029.110-0ubuntu0.16.04.1281vulnerable
Ubuntuchromium-browser16.0459.0.3071.109-0ubuntu0.16.04.1289vulnerable
Ubuntuchromium-browser16.0459.0.3071.109-0ubuntu0.16.04.1291vulnerable
Ubuntuchromium-browser16.0460.0.3112.78-0ubuntu0.16.04.1293vulnerable
Ubuntuchromium-browser16.0460.0.3112.113-0ubuntu0.16.04.1298vulnerable
Ubuntuchromium-browser16.0461.0.3163.79-0ubuntu0.16.04.1300vulnerable
Ubuntuchromium-browser16.0461.0.3163.100-0ubuntu0.16.04.1306fixed
Ubuntuoxide-qt16.041.9.5-0ubuntu1vulnerable
Ubuntuoxide-qt16.041.10.3-0ubuntu0.15.10.1vulnerable
Ubuntuoxide-qt16.041.10.3-0ubuntu0.15.10.2vulnerable
Ubuntuoxide-qt16.041.11.3-0ubuntu3vulnerable
Ubuntuoxide-qt16.041.11.4-0ubuntu1vulnerable
Ubuntuoxide-qt16.041.11.5-0ubuntu1vulnerable
Ubuntuoxide-qt16.041.12.5-0ubuntu1vulnerable
Ubuntuoxide-qt16.041.12.6-0ubuntu1vulnerable
Ubuntuoxide-qt16.041.12.7-0ubuntu1vulnerable
Ubuntuoxide-qt16.041.13.6-0ubuntu1vulnerable
Ubuntuoxide-qt16.041.14.7-0ubuntu1vulnerable
Ubuntuoxide-qt16.041.14.9-0ubuntu0.16.04.1vulnerable
Ubuntuoxide-qt16.041.15.7-0ubuntu0.16.04.1vulnerable
Ubuntuoxide-qt16.041.15.8-0ubuntu0.16.04.1vulnerable
Ubuntuoxide-qt16.041.16.5-0ubuntu0.16.04.1vulnerable
Ubuntuoxide-qt16.041.17.7-0ubuntu0.16.04.1vulnerable
Ubuntuoxide-qt16.041.17.9-0ubuntu0.16.04.1vulnerable
Ubuntuoxide-qt16.041.18.3-0ubuntu0.16.04.1vulnerable
Ubuntuoxide-qt16.041.18.5-0ubuntu0.16.04.1vulnerable
Ubuntuoxide-qt16.041.19.4-0ubuntu0.16.04.1vulnerable
Ubuntuoxide-qt16.041.20.4-0ubuntu0.16.04.1vulnerable
Ubuntuoxide-qt16.041.21.5-0ubuntu0.16.04.1vulnerable
Ubuntuchromium-browser18.0461.0.3163.100-0ubuntu1.1378fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Ubuntuchromium-browserdeb14.0461.0.3163.100-0ubuntu0.14.04.1202Not reportedUBUNTU-CVE-2017-5118Not reported
Ubuntuchromium-browserdeb16.0461.0.3163.100-0ubuntu0.16.04.1306Not reportedUBUNTU-CVE-2017-5118Not reported
Ubuntuchromium-browserdeb18.0461.0.3163.100-0ubuntu1.1378Not reportedUBUNTU-CVE-2017-5118Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]