Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - A flaw was found in openjpeg's src/lib/openjp2/t2.c in versions prior to 2.4.0. This flaw allows an
    attacker to provide crafted input to openjpeg during conversion and encoding, causing an out-of-bounds
    write. The highest threat from this vulnerability is to confidentiality, integrity, as well as system
    availability. (CVE-2020-27844)

  - Use after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially
    exploit heap corruption via a crafted SCTP packet. (CVE-2020-16044)

  - Insufficient data validation in V8 in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to
    potentially perform out of bounds memory access via a crafted HTML page. (CVE-2021-21118)

  - Use after free in Media in Google Chrome prior to 88.0.4324.96 allowed a remote attacker who had
    compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
    (CVE-2021-21119)

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Use after free in WebRTC in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially
    exploit heap corruption via a crafted HTML page. (CVE-2021-21191)

  - Heap buffer overflow in tab groups in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to
    potentially exploit heap corruption via a crafted HTML page. (CVE-2021-21192)

  - Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially
    exploit heap corruption via a crafted HTML page. (CVE-2021-21193)

This update for opera fixes the following issues :

  - Opera was updated to version 75.0.3969.171 (boo#1184256)     CVE-2021-21194, CVE-2021-21195, CVE-2021-21196,     CVE-2021-21197, CVE-2021-21198, CVE-2021-21199,     CVE-2021-21191, CVE-2021-21192, CVE-2021-21193

The remote host is affected by the vulnerability described in GLSA-202104-08 (Chromium, Google Chrome: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Chromium and Google       Chrome. Please review the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-141d8640ce advisory.

  - Use after free in WebRTC in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2021-21191)

  - Heap buffer overflow in tab groups in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2021-21192)

  - Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2021-21193)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Several vulnerabilites have been discovered in the chromium web browser.

  - CVE-2021-21159     Khalil Zhani discovered a buffer overflow issue in the     tab implementation.

  - CVE-2021-21160     Marcin Noga discovered a buffer overflow issue in     WebAudio.

  - CVE-2021-21161     Khalil Zhani discovered a buffer overflow issue in the     tab implementation.

  - CVE-2021-21162     A use-after-free issue was discovered in the WebRTC     implementation.

  - CVE-2021-21163     Alison Huffman discovered a data validation issue.

  - CVE-2021-21165     Alison Huffman discovered an error in the audio     implementation.

  - CVE-2021-21166     Alison Huffman discovered an error in the audio     implementation.

  - CVE-2021-21167     Leecraso and Guang Gong discovered a use-after-free     issue in the bookmarks implementation.

  - CVE-2021-21168     Luan Herrera discovered a policy enforcement error in     the appcache.

  - CVE-2021-21169     Bohan Liu and Moon Liang discovered an out-of-bounds     access issue in the v8 JavaScript library.

  - CVE-2021-21170     David Erceg discovered a user interface error.

  - CVE-2021-21171     Irvan Kurniawan discovered a user interface error.

  - CVE-2021-21172     Maciej Pulikowski discovered a policy enforcement error     in the File System API.

  - CVE-2021-21173     Tom Van Goethem discovered a network based information     leak.

  - CVE-2021-21174     Ashish Guatam Kambled discovered an implementation error     in the Referrer policy.

  - CVE-2021-21175     Jun Kokatsu discovered an implementation error in the     Site Isolation feature.

  - CVE-2021-21176     Luan Herrera discovered an implementation error in the     full screen mode.

  - CVE-2021-21177     Abdulrahman Alqabandi discovered a policy enforcement     error in the Autofill feature.

  - CVE-2021-21178     Japong discovered an error in the Compositor     implementation.

  - CVE-2021-21179     A use-after-free issue was discovered in the networking     implementation.

  - CVE-2021-21180     Abdulrahman Alqabandi discovered a use-after-free issue     in the tab search feature.

  - CVE-2021-21181     Xu Lin, Panagiotis Ilias, and Jason Polakis discovered a     side-channel information leak in the Autofill feature.

  - CVE-2021-21182     Luan Herrera discovered a policy enforcement error in     the site navigation implementation.

  - CVE-2021-21183     Takashi Yoneuchi discovered an implementation error in     the Performance API.

  - CVE-2021-21184     James Hartig discovered an implementation error in the     Performance API.

  - CVE-2021-21185     David Erceg discovered a policy enforcement error in     Extensions.

  - CVE-2021-21186     dhirajkumarnifty discovered a policy enforcement error     in the QR scan implementation.

  - CVE-2021-21187     Kirtikumar Anandrao Ramchandani discovered a data     validation error in URL formatting.

  - CVE-2021-21188     Woojin Oh discovered a use-after-free issue in     Blink/Webkit.

  - CVE-2021-21189     Khalil Zhani discovered a policy enforcement error in     the Payments implementation.

  - CVE-2021-21190     Zhou Aiting discovered use of uninitialized memory in     the pdfium library.

  - CVE-2021-21191     raven discovered a use-after-free issue in the WebRTC     implementation.

  - CVE-2021-21192     Abdulrahman Alqabandi discovered a buffer overflow issue     in the tab implementation.

  - CVE-2021-21193     A use-after-free issue was discovered in Blink/Webkit.

  - CVE-2021-21194     Leecraso and Guang Gong discovered a use-after-free     issue in the screen capture feature.

  - CVE-2021-21195     Liu and Liang discovered a use-after-free issue in the     v8 JavaScript library.

  - CVE-2021-21196     Khalil Zhani discovered a buffer overflow issue in the     tab implementation.

  - CVE-2021-21197     Abdulrahman Alqabandi discovered a buffer overflow issue     in the tab implementation.

  - CVE-2021-21198     Mark Brand discovered an out-of-bounds read issue in the     Inter-Process Communication implementation.

  - CVE-2021-21199     Weipeng Jiang discovered a use-after-free issue in the     Aura window and event manager.

This update for chromium fixes the following issues :

  - Chromium was updated to 89.0.4389.90 (boo#1183515)

  - CVE-2021-21191: Use after free in WebRTC.

  - CVE-2021-21192: Heap buffer overflow in tab groups.

  - CVE-2021-21193: Use after free in Blink.

The version of Microsoft Edge installed on the remote Windows host is prior to 89.0.774.54. It is, therefore, affected by multiple vulnerabilities as referenced in the March 15, 2021 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote macOS host is prior to 89.0.4389.90. It is, therefore, affected by multiple vulnerabilities as referenced in the 2021_03_stable-channel-update-for-desktop_12 advisory.

  - Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2021-21193)

  - Use after free in WebRTC in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2021-21191)

  - Heap buffer overflow in tab groups in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2021-21192)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote Windows host is prior to 89.0.4389.90. It is, therefore, affected by multiple vulnerabilities as referenced in the 2021_03_stable-channel-update-for-desktop_12 advisory.

  - Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2021-21193)

  - Use after free in WebRTC in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2021-21191)

  - Heap buffer overflow in tab groups in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2021-21192)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
406832	Alpine: qt5-qtwebengine: security update to 5.15.3_git20200401-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	critical
406832	Alpine: qt5-qtwebengine: security update to 5.15.3_git20200401-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	critical
403819	Alpine: multiple chromium packages: security update to 89.0.4389.90-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	high
403819	Alpine: multiple chromium packages: security update to 89.0.4389.90-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	high
150114	openSUSE Security Update : opera (openSUSE-2021-592)	Nessus	SuSE Local Security Checks	Local	high
149223	GLSA-202104-08 : Chromium, Google Chrome: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	Local	critical
148793	Fedora 32 : chromium (2021-141d8640ce)	Nessus	Fedora Local Security Checks	Local	high
148364	Debian DSA-4886-1 : chromium - security update	Nessus	Debian Local Security Checks	Local	high
147929	openSUSE Security Update : chromium (openSUSE-2021-436)	Nessus	SuSE Local Security Checks	Local	high
147812	Microsoft Edge (Chromium) < 89.0.774.54 Multiple Vulnerabilities	Nessus	Windows	Local	high
147755	Google Chrome < 89.0.4389.90 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	Local	high
147754	Google Chrome < 89.0.4389.90 Multiple Vulnerabilities	Nessus	Windows	Local	high

Detections

Analytics

CVE-2021-21193

high

Tenable Plugins

critical

critical

high

high

high

critical

high

high

high

high

high

high