Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-16064. Reason: This candidate is a reservation duplicate of CVE-2018-16064. Notes: All CVE users should reference CVE-2018-16064 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

This update for Chromium to version 68.0.3440.75 fixes multiple issues.

Security issues fixed (boo#1102530) :

  - CVE-2018-6153: Stack-based buffer overflow in Skia

  - CVE-2018-6154: Heap buffer overflow in WebGL

  - CVE-2018-6155: Use after free in WebRTC

  - CVE-2018-6156: Heap buffer overflow in WebRTC

  - CVE-2018-6157: Type confusion in WebRTC

  - CVE-2018-6158: Use after free in Blink

  - CVE-2018-6159: Same origin policy bypass in     ServiceWorker

  - CVE-2018-6161: Same origin policy bypass in WebAudio

  - CVE-2018-6162: Heap buffer overflow in WebGL

  - CVE-2018-6163: URL spoof in Omnibox

  - CVE-2018-6164: Same origin policy bypass in     ServiceWorker

  - CVE-2018-6165: URL spoof in Omnibox

  - CVE-2018-6166: URL spoof in Omnibox

  - CVE-2018-6167: URL spoof in Omnibox

  - CVE-2018-6168: CORS bypass in Blink

  - CVE-2018-6169: Permissions bypass in extension     installation

  - CVE-2018-6170: Type confusion in PDFium

  - CVE-2018-6171: Use after free in WebBluetooth

  - CVE-2018-6172: URL spoof in Omnibox

  - CVE-2018-6173: URL spoof in Omnibox

  - CVE-2018-6174: Integer overflow in SwiftShader

  - CVE-2018-6175: URL spoof in Omnibox

  - CVE-2018-6176: Local user privilege escalation in     Extensions

  - CVE-2018-6177: Cross origin information leak in Blink

  - CVE-2018-6178: UI spoof in Extensions

  - CVE-2018-6179: Local file information leak in Extensions

  - CVE-2018-6044: Request privilege escalation in     Extensions

  - CVE-2018-4117: Cross origin information leak in Blink

The following user interface changes are included :

  - Chrome will show the 'Not secure' warning on all plain     HTTP pages

The remote host is affected by the vulnerability described in GLSA-201808-01 (Chromium, Google Chrome: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Chromium and Google       Chrome. Please review the referenced CVE identifiers and Google Chrome       Releases for details.
  Impact :

    A remote attacker could escalate privileges, cause a heap buffer       overflow, obtain sensitive information or spoof a URL.
  Workaround :

    There is no known workaround at this time.

Google Chrome Releases reports :

42 security fixes in this release, including :

- [850350] High CVE-2018-6153: Stack buffer overflow in Skia. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-06-07

- [848914] High CVE-2018-6154: Heap buffer overflow in WebGL. Reported by Omair on 2018-06-01

- [842265] High CVE-2018-6155: Use after free in WebRTC. Reported by Natalie Silvanovich of Google Project Zero on 2018-05-11

- [841962] High CVE-2018-6156: Heap buffer overflow in WebRTC.
Reported by Natalie Silvanovich of Google Project Zero on 2018-05-10

- [840536] High CVE-2018-6157: Type confusion in WebRTC. Reported by Natalie Silvanovich of Google Project Zero on 2018-05-07

- [812667] Medium CVE-2018-6150: Cross origin information disclosure in Service Workers. Reported by Rob Wu on 2018-02-15

- [805905] Medium CVE-2018-6151: Bad cast in DevTools. Reported by Rob Wu on 2018-01-25

- [805445] Medium CVE-2018-6152: Local file write in DevTools.
Reported by Rob Wu on 2018-01-24

- [841280] Medium CVE-2018-6158: Use after free in Blink. Reported by Zhe Jin, Luyao Liu from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-05-09

- [837275] Medium CVE-2018-6159: Same origin policy bypass in ServiceWorker. Reported by Jun Kokatsu (@shhnjk) on 2018-04-26

- [839822] Medium CVE-2018-6160: URL spoof in Chrome on iOS. Reported by evi1m0 of Bilibili Security Team on 2018-05-04

- [826552] Medium CVE-2018-6161: Same origin policy bypass in WebAudio. Reported by Jun Kokatsu (@shhnjk) on 2018-03-27

- [804123] Medium CVE-2018-6162: Heap buffer overflow in WebGL.
Reported by Omair on 2018-01-21

- [849398] Medium CVE-2018-6163: URL spoof in Omnibox. Reported by Khalil Zhani on 2018-06-04

- [848786] Medium CVE-2018-6164: Same origin policy bypass in ServiceWorker. Reported by Jun Kokatsu (@shhnjk) on 2018-06-01

- [847718] Medium CVE-2018-6165: URL spoof in Omnibox. Reported by evi1m0 of Bilibili Security Team on 2018-05-30

- [835554] Medium CVE-2018-6166: URL spoof in Omnibox. Reported by Lnyas Zhang on 2018-04-21

- [833143] Medium CVE-2018-6167: URL spoof in Omnibox. Reported by Lnyas Zhang on 2018-04-15

- [828265] Medium CVE-2018-6168: CORS bypass in Blink. Reported by Gunes Acar and Danny Y. Huang of Princeton University, Frank Li of UC Berkeley on 2018-04-03

- [394518] Medium CVE-2018-6169: Permissions bypass in extension installation. Reported by Sam P on 2014-07-16

- [862059] Medium CVE-2018-6170: Type confusion in PDFium. Reported by Anonymous on 2018-07-10

- [851799] Medium CVE-2018-6171: Use after free in WebBluetooth.
Reported by amazon@mimetics.ca on 2018-06-12

- [847242] Medium CVE-2018-6172: URL spoof in Omnibox. Reported by Khalil Zhani on 2018-05-28

- [836885] Medium CVE-2018-6173: URL spoof in Omnibox. Reported by Khalil Zhani on 2018-04-25

- [835299] Medium CVE-2018-6174: Integer overflow in SwiftShader.
Reported by Mark Brand of Google Project Zero on 2018-04-20

- [826019] Medium CVE-2018-6175: URL spoof in Omnibox. Reported by Khalil Zhani on 2018-03-26

- [666824] Medium CVE-2018-6176: Local user privilege escalation in Extensions. Reported by Jann Horn of Google Project Zero on 2016-11-18

- [826187] Low CVE-2018-6177: Cross origin information leak in Blink.
Reported by Ron Masas (Imperva) on 2018-03-27

- [823194] Low CVE-2018-6178: UI spoof in Extensions. Reported by Khalil Zhani on 2018-03-19

- [816685] Low CVE-2018-6179: Local file information leak in Extensions. Reported by Anonymous on 2018-02-26

- [797461] Low CVE-2018-6044: Request privilege escalation in Extensions. Reported by Wob Wu on 2017-12-23

- [791324] Low CVE-2018-4117: Cross origin information leak in Blink.
Reported by AhsanEjaz - @AhsanEjazA on 2017-12-03

- [866821] Various fixes from internal audits, fuzzing and other initiatives

Several vulnerabilities have been discovered in the chromium web browser.

  - CVE-2018-4117     AhsanEjaz discovered an information leak.

  - CVE-2018-6044     Rob Wu discovered a way to escalate privileges using     extensions.

  - CVE-2018-6150     Rob Wu discovered an information disclosure issue (this     problem was fixed in a previous release but was     mistakenly omitted from upstream's announcement at the     time).

  - CVE-2018-6151     Rob Wu discovered an issue in the developer tools (this     problem was fixed in a previous release but was     mistakenly omitted from upstream's announcement at the     time).

  - CVE-2018-6152     Rob Wu discovered an issue in the developer tools (this     problem was fixed in a previous release but was     mistakenly omitted from upstream's announcement at the     time).

  - CVE-2018-6153     Zhen Zhou discovered a buffer overflow issue in the skia     library.

  - CVE-2018-6154     Omair discovered a buffer overflow issue in the WebGL     implementation.

  - CVE-2018-6155     Natalie Silvanovich discovered a use-after-free issue in     the WebRTC implementation.

  - CVE-2018-6156     Natalie Silvanovich discovered a buffer overflow issue     in the WebRTC implementation.

  - CVE-2018-6157     Natalie Silvanovich discovered a type confusion issue in     the WebRTC implementation.

  - CVE-2018-6158     Zhe Jin discovered a use-after-free issue.

  - CVE-2018-6159     Jun Kokatsu discovered a way to bypass the same origin     policy.

  - CVE-2018-6161     Jun Kokatsu discovered a way to bypass the same origin     policy.

  - CVE-2018-6162     Omair discovered a buffer overflow issue in the WebGL     implementation.

  - CVE-2018-6163     Khalil Zhani discovered a URL spoofing issue.

  - CVE-2018-6164     Jun Kokatsu discovered a way to bypass the same origin     policy.

  - CVE-2018-6165     evil1m0 discovered a URL spoofing issue.

  - CVE-2018-6166     Lynas Zhang discovered a URL spoofing issue.

  - CVE-2018-6167     Lynas Zhang discovered a URL spoofing issue.

  - CVE-2018-6168     Gunes Acar and Danny Y. Huang discovered a way to bypass     the Cross Origin Resource Sharing policy.

  - CVE-2018-6169     Sam P discovered a way to bypass permissions when     installing extensions.

  - CVE-2018-6170     A type confusion issue was discovered in the pdfium     library.

  - CVE-2018-6171     A use-after-free issue was discovered in the     WebBluetooth implementation.

  - CVE-2018-6172     Khalil Zhani discovered a URL spoofing issue.

  - CVE-2018-6173     Khalil Zhani discovered a URL spoofing issue.

  - CVE-2018-6174     Mark Brand discovered an integer overflow issue in the     swiftshader library.

  - CVE-2018-6175     Khalil Zhani discovered a URL spoofing issue.

  - CVE-2018-6176     Jann Horn discovered a way to escalate privileges using     extensions.

  - CVE-2018-6177     Ron Masas discovered an information leak.

  - CVE-2018-6178     Khalil Zhani discovered a user interface spoofing issue.

  - CVE-2018-6179     It was discovered that information about files local to     the system could be leaked to extensions.

This version also fixes a regression introduced in the previous security update that could prevent decoding of particular audio/video codecs.

ID	Name	Product	Family	Severity
123240	openSUSE Security Update : Chromium (openSUSE-2019-559)	Nessus	SuSE Local Security Checks	high
112075	GLSA-201808-01 : Chromium, Google Chrome: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
111432	openSUSE Security Update : Chromium (openSUSE-2018-780)	Nessus	SuSE Local Security Checks	high
111407	FreeBSD : chromium -- multiple vulnerabilities (b9c525d9-9198-11e8-beba-080027ef1a23)	Nessus	FreeBSD Local Security Checks	critical
111360	Debian DSA-4256-1 : chromium-browser - security update	Nessus	Debian Local Security Checks	critical

Detections

Analytics

CVE-2018-6044

No Score

Tenable Plugins

high

critical

high

critical

critical