The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5275 advisory.

  - Use after free in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2022-3885)

  - Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2022-3886)

  - Use after free in Web Workers in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2022-3887)

  - Use after free in WebCodecs in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2022-3888)

  - Type confusion in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2022-3889)

  - Heap buffer overflow in Crashpad in Google Chrome on Android prior to 107.0.5304.106 allowed a remote     attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted     HTML page. (Chromium security severity: High) (CVE-2022-3890)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian DSA-5275-1 : chromium - security update

critical Nessus Plugin ID 167275

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.5 Oct 25, 2023, 5:17 PM CVSSv2 score source (changed from "CVE-2022-3888" to "CVE-2022-3890") CVSSv3 score source (changed from "CVE-2022-3890" to "None") Plugin Feed: 202310251717
Version 1.4 Dec 1, 2022, 5:53 PM IAVM reference Plugin Feed: 202212011753
Version 1.3 Nov 11, 2022, 3:54 PM STIG Severity IAVM reference Plugin Feed: 202211111554
Version 1.2 Nov 11, 2022, 7:47 AM New Plugin Feed: 202211110747