The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:4238 advisory.

  - chromium-browser: Use after free in Bluetooth (CVE-2019-13725)

  - chromium-browser: Heap buffer overflow in password manager (CVE-2019-13726)

  - chromium-browser: Insufficient policy enforcement in WebSockets (CVE-2019-13727)

  - chromium-browser: Out of bounds write in V8 (CVE-2019-13728, CVE-2019-13735)

  - chromium-browser: Use after free in WebSockets (CVE-2019-13729)

  - chromium-browser: Type Confusion in V8 (CVE-2019-13730, CVE-2019-13764)

  - chromium-browser: Use after free in WebAudio (CVE-2019-13732)

  - sqlite: fts3: improve shadow table corruption detection (CVE-2019-13734, CVE-2019-13752)

  - chromium-browser: Integer overflow in PDFium (CVE-2019-13736)

  - chromium-browser: Insufficient policy enforcement in autocomplete (CVE-2019-13737)

  - chromium-browser: Insufficient policy enforcement in navigation (CVE-2019-13738, CVE-2019-13758)

  - chromium-browser: Incorrect security UI in Omnibox (CVE-2019-13739, CVE-2019-13742, CVE-2019-13749,     CVE-2019-13757, CVE-2019-13761)

  - chromium-browser: Incorrect security UI in sharing (CVE-2019-13740)

  - chromium-browser: Insufficient validation of untrusted input in Blink (CVE-2019-13741)

  - chromium-browser: Incorrect security UI in external protocol handling (CVE-2019-13743)

  - chromium-browser: Insufficient policy enforcement in cookies (CVE-2019-13744)

  - chromium-browser: Insufficient policy enforcement in audio (CVE-2019-13745)

  - chromium-browser: Insufficient policy enforcement in Omnibox (CVE-2019-13746)

  - chromium-browser: Uninitialized Use in rendering (CVE-2019-13747)

  - chromium-browser: Insufficient policy enforcement in developer tools (CVE-2019-13748)

  - sqlite: dropping of shadow tables not restricted in defensive mode (CVE-2019-13750)

  - sqlite: fts3: improve detection of corrupted records (CVE-2019-13751)

  - sqlite: fts3: incorrectly removed corruption check (CVE-2019-13753)

  - chromium-browser: Insufficient policy enforcement in extensions (CVE-2019-13754, CVE-2019-13755)

  - chromium-browser: Incorrect security UI in printing (CVE-2019-13756)

  - chromium-browser: Incorrect security UI in interstitials (CVE-2019-13759)

  - chromium-browser: Insufficient policy enforcement in downloads (CVE-2019-13762)

  - chromium-browser: Insufficient policy enforcement in payments (CVE-2019-13763)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 6 : chromium-browser (RHSA-2019:4238)

high Nessus Plugin ID 132228

Version 1.5

Version 1.4

Version 1.5 Apr 25, 2024, 2:46 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202404250246
Version 1.4 Apr 3, 2024, 1:48 PM Exploit attributes ("Exploit available" set to "True". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") CVSSv2 score source (set to "CVE-2019-13764") Plugin Feed: 202404031348