Use after free in WebBluetooth in Google Chrome prior to 78.0.3904.108 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

The remote host is affected by the vulnerability described in GLSA-202003-08 (Chromium, Google Chrome: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Chromium and Google       Chrome. Please review the referenced CVE identifiers and Google Chrome       Releases for details.
  Impact :

    A remote attacker could execute arbitrary code, escalate privileges,       obtain sensitive information, spoof an URL or cause a Denial of Service       condition.
  Workaround :

    There is no known workaround at this time.

Fixes CVE-2019-13723 & CVE-2019-13724

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:3955 advisory.

    Chromium is an open-source web browser, powered by WebKit (Blink).

    This update upgrades Chromium to version 78.0.3904.108.

    Security Fix(es):

    * chromium-browser: use-after-free in bluetooth (CVE-2019-13723)

    * chromium-browser: out-of-bounds access in bluetooth (CVE-2019-13724)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for chromium to version 78.0.3904.108 fixes the following issues :

&#9; - Chromium was updated to 78.0.3904.108 (boo#1157269)

Security issues fixed :

  - CVE-2019-13723: Fixed a use-after-free in Bluetooth

  - CVE-2019-13724: Fixed an out of bounds access in     Bluetooth

This update for chromium to version 78.0.3904.108 fixes the following issues :

  - Chromium was updated to 78.0.3904.108 (boo#1157269)&#9; 

Security issues fixed :

  - CVE-2019-13723: Fixed a use-after-free in Bluetooth

  - CVE-2019-13724: Fixed an out of bounds access in     Bluetooth

Several vulnerabilities have been discovered in the chromium web browser.

  - CVE-2019-13723     Yuxiang Li discovered a use-after-free issue in the     bluetooth service.

  - CVE-2019-13724     Yuxiang Li discovered an out-of-bounds read issue in the     bluetooth service.

The version of Google Chrome installed on the remote Windows host is prior to 78.0.3904.108. It is, therefore, affected by multiple vulnerabilities as referenced in the 2019_11_stable-channel-update-for-desktop_18 advisory.

  - Out of bounds memory access in WebBluetooth in Google Chrome prior to 78.0.3904.108 allowed a remote     attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted     HTML page. (CVE-2019-13724)

  - Use after free in WebBluetooth in Google Chrome prior to 78.0.3904.108 allowed a remote attacker who had     compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
    (CVE-2019-13723)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote macOS host is prior to 78.0.3904.108. It is, therefore, affected by multiple vulnerabilities as referenced in the 2019_11_stable-channel-update-for-desktop_18 advisory.

  - Out of bounds memory access in WebBluetooth in Google Chrome prior to 78.0.3904.108 allowed a remote     attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted     HTML page. (CVE-2019-13724)

  - Use after free in WebBluetooth in Google Chrome prior to 78.0.3904.108 allowed a remote attacker who had     compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
    (CVE-2019-13723)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
134475	GLSA-202003-08 : Chromium, Google Chrome: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	Local	high
131785	Fedora 30 : chromium (2019-00d5e55259)	Nessus	Fedora Local Security Checks	Local	high
131446	Fedora 31 : chromium (2019-3e46b182ff)	Nessus	Fedora Local Security Checks	Local	high
131300	RHEL 6 : chromium-browser (RHSA-2019:3955)	Nessus	Red Hat Local Security Checks	Local	high
131276	openSUSE Security Update : chromium (openSUSE-2019-2545)	Nessus	SuSE Local Security Checks	Local	high
131275	openSUSE Security Update : chromium (openSUSE-2019-2544)	Nessus	SuSE Local Security Checks	Local	high
131249	Debian DSA-4575-1 : chromium - security update	Nessus	Debian Local Security Checks	Local	high
131190	Google Chrome < 78.0.3904.108 Multiple Vulnerabilities	Nessus	Windows	Local	high
131189	Google Chrome < 78.0.3904.108 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	Local	high

Detections

Analytics

CVE-2019-13723

high

Tenable Plugins

high

high

high

high

high

high

high

high

high