Detections
Analytics

openSUSE Security Update : chromium (openSUSE-2015-228)

high Nessus Plugin ID 81870

Language:

Synopsis

The remote openSUSE host is missing a security update.

Description

Chromium was updated to 41.0.2272.76 (bnc#920825)

Security fixes :

 - CVE-2015-1212: Out-of-bounds write in media

 - CVE-2015-1213: Out-of-bounds write in skia filters

 - CVE-2015-1214: Out-of-bounds write in skia filters

 - CVE-2015-1215: Out-of-bounds write in skia filters

 - CVE-2015-1216: Use-after-free in v8 bindings

 - CVE-2015-1217: Type confusion in v8 bindings

 - CVE-2015-1218: Use-after-free in dom

 - CVE-2015-1219: Integer overflow in webgl

 - CVE-2015-1220: Use-after-free in gif decoder

 - CVE-2015-1221: Use-after-free in web databases

 - CVE-2015-1222: Use-after-free in service workers

 - CVE-2015-1223: Use-after-free in dom

 - CVE-2015-1230: Type confusion in v8

 - CVE-2015-1224: Out-of-bounds read in vpxdecoder

 - CVE-2015-1225: Out-of-bounds read in pdfium

 - CVE-2015-1226: Validation issue in debugger

 - CVE-2015-1227: Uninitialized value in blink

 - CVE-2015-1228: Uninitialized value in rendering

 - CVE-2015-1229: Cookie injection via proxies

 - CVE-2015-1231: Various fixes from internal audits

 - Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch

Solution

Update the affected chromium packages.

See Also

https://bugzilla.opensuse.org/show_bug.cgi?id=920825

Plugin Details

Severity: High

ID: 81870

File Name: openSUSE-2015-228.nasl

Version: 1.10

Type: local

Agent: unix

Published: 3/17/2015

Updated: 1/19/2021

Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.3

CVSS v2

Risk Factor: High

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: p-cpe:/a:novell:opensuse:chromedriver, p-cpe:/a:novell:opensuse:chromedriver-debuginfo, p-cpe:/a:novell:opensuse:chromium, p-cpe:/a:novell:opensuse:chromium-debuginfo, p-cpe:/a:novell:opensuse:chromium-debugsource, p-cpe:/a:novell:opensuse:chromium-desktop-gnome, p-cpe:/a:novell:opensuse:chromium-desktop-kde, p-cpe:/a:novell:opensuse:chromium-ffmpegsumo, p-cpe:/a:novell:opensuse:chromium-ffmpegsumo-debuginfo, cpe:/o:novell:opensuse:13.1, cpe:/o:novell:opensuse:13.2

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list

Patch Publication Date: 3/6/2015

Reference Information

CVE: CVE-2015-1212, CVE-2015-1213, CVE-2015-1214, CVE-2015-1215, CVE-2015-1216, CVE-2015-1217, CVE-2015-1218, CVE-2015-1219, CVE-2015-1220, CVE-2015-1221, CVE-2015-1222, CVE-2015-1223, CVE-2015-1224, CVE-2015-1225, CVE-2015-1226, CVE-2015-1227, CVE-2015-1228, CVE-2015-1229, CVE-2015-1230, CVE-2015-1231