RHEL 6 : chromium-browser (RHSA-2015:0093)

critical Nessus Plugin ID 81035

Synopsis

The remote Red Hat host is missing one or more security updates for chromium-browser.

Description

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2015:0093 advisory.

Chromium is an open-source web browser, powered by WebKit (Blink).

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Chromium to crash or, potentially, execute arbitrary code with the privileges of the user running Chromium. (CVE-2014-7923, CVE-2014-7924, CVE-2014-7925, CVE-2014-7926, CVE-2014-7927, CVE-2014-7928, CVE-2014-7929, CVE-2014-7930, CVE-2014-7931, CVE-2014-7932, CVE-2014-7933, CVE-2014-7934, CVE-2014-7935, CVE-2014-7936, CVE-2014-7937, CVE-2014-7938, CVE-2014-7939, CVE-2014-7940, CVE-2014-7941, CVE-2014-7942, CVE-2014-7943, CVE-2014-7944, CVE-2014-7945, CVE-2014-7946, CVE-2014-7947, CVE-2014-7948)

All Chromium users should upgrade to these updated packages, which contain Chromium version 40.0.2214.91, which corrects these issues. After installing the update, Chromium must be restarted for the changes to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Update the RHEL chromium-browser package based on the guidance in RHSA-2015:0093.

See Also

http://googlechromereleases.blogspot.com/2015/01/stable-update.html

http://www.nessus.org/u?90a0ff39

https://access.redhat.com/errata/RHSA-2015:0093

https://access.redhat.com/security/updates/classification/#important

https://bugzilla.redhat.com/show_bug.cgi?id=1185202

https://bugzilla.redhat.com/show_bug.cgi?id=1185203

https://bugzilla.redhat.com/show_bug.cgi?id=1185204

https://bugzilla.redhat.com/show_bug.cgi?id=1185205

https://bugzilla.redhat.com/show_bug.cgi?id=1185206

https://bugzilla.redhat.com/show_bug.cgi?id=1185208

https://bugzilla.redhat.com/show_bug.cgi?id=1185209

https://bugzilla.redhat.com/show_bug.cgi?id=1185210

https://bugzilla.redhat.com/show_bug.cgi?id=1185211

https://bugzilla.redhat.com/show_bug.cgi?id=1185212

https://bugzilla.redhat.com/show_bug.cgi?id=1185213

https://bugzilla.redhat.com/show_bug.cgi?id=1185214

https://bugzilla.redhat.com/show_bug.cgi?id=1185215

https://bugzilla.redhat.com/show_bug.cgi?id=1185216

https://bugzilla.redhat.com/show_bug.cgi?id=1185217

https://bugzilla.redhat.com/show_bug.cgi?id=1185218

https://bugzilla.redhat.com/show_bug.cgi?id=1185219

https://bugzilla.redhat.com/show_bug.cgi?id=1185220

https://bugzilla.redhat.com/show_bug.cgi?id=1185221

https://bugzilla.redhat.com/show_bug.cgi?id=1185222

https://bugzilla.redhat.com/show_bug.cgi?id=1185223

https://bugzilla.redhat.com/show_bug.cgi?id=1185224

https://bugzilla.redhat.com/show_bug.cgi?id=1185225

https://bugzilla.redhat.com/show_bug.cgi?id=1185226

https://bugzilla.redhat.com/show_bug.cgi?id=1185229

https://bugzilla.redhat.com/show_bug.cgi?id=1185230

Plugin Details

Severity: Critical

ID: 81035

File Name: redhat-RHSA-2015-0093.nasl

Version: 1.23

Type: local

Agent: unix

Published: 1/28/2015

Updated: 8/15/2025

Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

Vendor

Vendor Severity: Important

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS Score Source: CVE-2015-1346

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 8.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

CVSS Score Source: CVE-2014-9654

Vulnerability Information

CPE: p-cpe:/a:redhat:enterprise_linux:chromium-browser, cpe:/o:redhat:enterprise_linux:6

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu

Exploit Ease: No known exploits are available

Patch Publication Date: 1/27/2015

Vulnerability Publication Date: 1/22/2015

Reference Information

CVE: CVE-2014-7923, CVE-2014-7924, CVE-2014-7925, CVE-2014-7926, CVE-2014-7927, CVE-2014-7928, CVE-2014-7929, CVE-2014-7930, CVE-2014-7931, CVE-2014-7932, CVE-2014-7933, CVE-2014-7934, CVE-2014-7935, CVE-2014-7936, CVE-2014-7937, CVE-2014-7938, CVE-2014-7939, CVE-2014-7940, CVE-2014-7941, CVE-2014-7942, CVE-2014-7943, CVE-2014-7944, CVE-2014-7945, CVE-2014-7946, CVE-2014-7947, CVE-2014-7948, CVE-2014-9654, CVE-2015-1205, CVE-2015-1346

BID: 72288

CWE: 122, 125, 416, 456, 787

RHSA: 2015:0093