Detections
Analytics

openSUSE Security Update : chromium (openSUSE-2017-1349)

high Nessus Plugin ID 105235

Language:

Synopsis

The remote openSUSE host is missing a security update.

Description

This update to Chromium 63.0.3239.84 fixes the following security issues :

 - CVE-2017-15408: Heap buffer overflow in PDFium

 - CVE-2017-15409: Out of bounds write in Skia

 - CVE-2017-15410: Use after free in PDFium

 - CVE-2017-15411: Use after free in PDFium

 - CVE-2017-15412: Use after free in libXML

 - CVE-2017-15413: Type confusion in WebAssembly

 - CVE-2017-15415: Pointer information disclosure in IPC call

 - CVE-2017-15416: Out of bounds read in Blink

 - CVE-2017-15417: Cross origin information disclosure in Skia

 - CVE-2017-15418: Use of uninitialized value in Skia

 - CVE-2017-15419: Cross origin leak of redirect URL in Blink

 - CVE-2017-15420: URL spoofing in Omnibox

 - CVE-2017-15422: Integer overflow in ICU

 - CVE-2017-15423: Issue with SPAKE implementation in BoringSSL

 - CVE-2017-15424: URL Spoof in Omnibox

 - CVE-2017-15425: URL Spoof in Omnibox

 - CVE-2017-15426: URL Spoof in Omnibox

 - CVE-2017-15427: Insufficient blocking of JavaScript in Omnibox

Solution

Update the affected chromium packages.

See Also

https://bugzilla.opensuse.org/show_bug.cgi?id=1071691

Plugin Details

Severity: High

ID: 105235

File Name: openSUSE-2017-1349.nasl

Version: 3.6

Type: local

Agent: unix

Published: 12/14/2017

Updated: 1/19/2021

Supported Sensors: Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS v3

Risk Factor: High

Base Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Vulnerability Information

CPE: p-cpe:/a:novell:opensuse:chromedriver, p-cpe:/a:novell:opensuse:chromedriver-debuginfo, p-cpe:/a:novell:opensuse:chromium, p-cpe:/a:novell:opensuse:chromium-debuginfo, p-cpe:/a:novell:opensuse:chromium-debugsource, cpe:/o:novell:opensuse:42.2, cpe:/o:novell:opensuse:42.3

Required KB Items: Host/local_checks_enabled, Host/SuSE/release, Host/SuSE/rpm-list, Host/cpu

Patch Publication Date: 12/8/2017

Reference Information

CVE: CVE-2017-15408, CVE-2017-15409, CVE-2017-15410, CVE-2017-15411, CVE-2017-15412, CVE-2017-15413, CVE-2017-15415, CVE-2017-15416, CVE-2017-15417, CVE-2017-15418, CVE-2017-15419, CVE-2017-15420, CVE-2017-15422, CVE-2017-15423, CVE-2017-15424, CVE-2017-15425, CVE-2017-15426, CVE-2017-15427