CVE-2018-6056

Name	CVE-2018-6056
Description	Type confusion could lead to a heap out-of-bounds write in V8 in Google Chrome prior to 64.0.3282.168 allowing a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DSA-4182-1

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin
chromium-browser	source	experimental	65.0.3325.73-1
chromium-browser	source	wheezy	(unfixed)	end-of-life
chromium-browser	source	jessie	(unfixed)	end-of-life
chromium-browser	source	stretch	66.0.3359.117-1~deb9u1		DSA-4182-1
chromium-browser	source	(unstable)	65.0.3325.146-1
libv8	source	(unstable)	(unfixed)	unimportant

Notes

[jessie] - chromium-browser <end-of-life> (End of life, see DSA 4020)
[wheezy] - chromium-browser <end-of-life> (Not supported in Wheezy)
libv8 not covered by security support