GLSA-202011-12 : Chromium, Google Chrome: Multiple vulnerabilities
critical Nessus Plugin ID 142833
Synopsis
The remote Gentoo host is missing one or more security-related patches.Description
The remote host is affected by the vulnerability described in GLSA-202011-12 (Chromium, Google Chrome: Multiple vulnerabilities)Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details.
Impact :
Please review the referenced CVE identifiers for details.
Workaround :
There is no known workaround at this time.
Solution
All Chromium users should upgrade to the latest version:# emerge --sync # emerge --ask --oneshot --verbose '>=www-client/chromium-86.0.4240.193' All Google Chrome users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose '>=www-client/google-chrome-86.0.4240.193'
See Also
Plugin Details
Severity: Critical
ID: 142833
File Name: gentoo_GLSA-202011-12.nasl
Version: 1.11
Type: local
Family: Gentoo Local Security Checks
Published: 11/12/2020
Updated: 12/14/2021
Risk Information
VPR
Risk Factor: Critical
Score: 9
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5.9
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Temporal Vector: E:H/RL:OF/RC:C
CVSS Score Source: CVE-2020-16016
CVSS v3
Risk Factor: Critical
Base Score: 9.6
Temporal Score: 9.2
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Temporal Vector: E:H/RL:O/RC:C
Vulnerability Information
CPE: p-cpe:/a:gentoo:linux:chromium, p-cpe:/a:gentoo:linux:google-chrome, cpe:/o:gentoo:linux
Required KB Items: Host/local_checks_enabled, Host/Gentoo/release, Host/Gentoo/qpkg-list
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 11/11/2020
Vulnerability Publication Date: 11/3/2020
CISA Known Exploited Dates: 11/17/2021, 5/3/2022
Reference Information
CVE: CVE-2020-15999, CVE-2020-16004, CVE-2020-16005, CVE-2020-16006, CVE-2020-16008, CVE-2020-16009, CVE-2020-16016
GLSA: 202011-12
IAVA: 2020-A-0530-S