CVE-2016-2845
Publication date 5 March 2016
Last updated 25 August 2025
Ubuntu priority
Description
The Content Security Policy (CSP) implementation in Blink, as used in Google Chrome before 49.0.2623.75, does not ignore a URL's path component in the case of a ServiceWorker fetch, which allows remote attackers to obtain sensitive information about visited web pages by reading CSP violation reports, related to FrameFetchContext.cpp and ResourceFetcher.cpp.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| chromium-browser | ||
| 14.04 LTS trusty |
Fixed 49.0.2623.87-0ubuntu0.14.04.1.1112
|
|
| oxide-qt | ||
| 14.04 LTS trusty |
Fixed 1.13.6-0ubuntu0.14.04.1
|
|
Severity score breakdown
CVSS version: CVSS v3.0
Base score
5.3 · Medium
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
References
Related Ubuntu Security Notices (USN)
- USN-2920-1
- Oxide vulnerabilities
- 10 March 2016
Other references
- https://codereview.chromium.org/1454003003/
- https://code.google.com/p/chromium/issues/detail?id=591402
- https://bugs.chromium.org/p/chromium/issues/detail?id=542060
- http://homakov.blogspot.com/2014/01/using-content-security-policy-for-evil.html
- http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html
- https://www.cve.org/CVERecord?id=CVE-2016-2845