RHEL 6 : chromium-browser (RHSA-2015:2545)

critical Nessus Plugin ID 87195

Synopsis

The remote Red Hat host is missing one or more security updates for chromium-browser.

Description

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2015:2545 advisory.

Chromium is an open-source web browser, powered by WebKit (Blink).

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information when visited by the victim. (CVE-2015-6764, CVE-2015-6765, CVE-2015-6766, CVE-2015-6767, CVE-2015-6768, CVE-2015-6769, CVE-2015-6770, CVE-2015-6771, CVE-2015-6772, CVE-2015-6773, CVE-2015-6774, CVE-2015-6775, CVE-2015-6776, CVE-2015-6777, CVE-2015-6778, CVE-2015-6779, CVE-2015-6780, CVE-2015-6781, CVE-2015-6782, CVE-2015-6784, CVE-2015-6785, CVE-2015-6786, CVE-2015-6787)

All Chromium users should upgrade to these updated packages, which contain Chromium version 47.0.2526.73, which corrects these issues. After installing the update, Chromium must be restarted for the changes to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Update the RHEL chromium-browser package based on the guidance in RHSA-2015:2545.

See Also

https://bugzilla.redhat.com/show_bug.cgi?id=1287491

https://bugzilla.redhat.com/show_bug.cgi?id=1287492

https://bugzilla.redhat.com/show_bug.cgi?id=1287493

https://bugzilla.redhat.com/show_bug.cgi?id=1287494

https://bugzilla.redhat.com/show_bug.cgi?id=1287495

https://bugzilla.redhat.com/show_bug.cgi?id=1287496

https://bugzilla.redhat.com/show_bug.cgi?id=1287497

https://bugzilla.redhat.com/show_bug.cgi?id=1287499

https://bugzilla.redhat.com/show_bug.cgi?id=1287500

https://bugzilla.redhat.com/show_bug.cgi?id=1287501

https://bugzilla.redhat.com/show_bug.cgi?id=1287502

http://www.nessus.org/u?2e279b58

http://www.nessus.org/u?cb87862e

https://access.redhat.com/errata/RHSA-2015:2545

https://access.redhat.com/security/updates/classification/#critical

https://bugzilla.redhat.com/show_bug.cgi?id=1285774

https://bugzilla.redhat.com/show_bug.cgi?id=1287441

https://bugzilla.redhat.com/show_bug.cgi?id=1287481

https://bugzilla.redhat.com/show_bug.cgi?id=1287482

https://bugzilla.redhat.com/show_bug.cgi?id=1287483

https://bugzilla.redhat.com/show_bug.cgi?id=1287484

https://bugzilla.redhat.com/show_bug.cgi?id=1287485

https://bugzilla.redhat.com/show_bug.cgi?id=1287486

https://bugzilla.redhat.com/show_bug.cgi?id=1287487

https://bugzilla.redhat.com/show_bug.cgi?id=1287488

https://bugzilla.redhat.com/show_bug.cgi?id=1287489

https://bugzilla.redhat.com/show_bug.cgi?id=1287490

Plugin Details

Severity: Critical

ID: 87195

File Name: redhat-RHSA-2015-2545.nasl

Version: 2.17

Type: local

Agent: unix

Published: 12/4/2015

Updated: 8/15/2025

Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Continuous Assessment, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

Vendor

Vendor Severity: Critical

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2015-8480

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

CVSS Score Source: CVE-2015-6764

Vulnerability Information

CPE: p-cpe:/a:redhat:enterprise_linux:chromium-browser, cpe:/o:redhat:enterprise_linux:6

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 12/3/2015

Vulnerability Publication Date: 12/6/2015

Reference Information

CVE: CVE-2015-6764, CVE-2015-6765, CVE-2015-6766, CVE-2015-6767, CVE-2015-6768, CVE-2015-6769, CVE-2015-6770, CVE-2015-6771, CVE-2015-6772, CVE-2015-6773, CVE-2015-6774, CVE-2015-6775, CVE-2015-6776, CVE-2015-6777, CVE-2015-6778, CVE-2015-6779, CVE-2015-6780, CVE-2015-6781, CVE-2015-6782, CVE-2015-6784, CVE-2015-6785, CVE-2015-6786, CVE-2015-6787, CVE-2015-8478, CVE-2015-8479, CVE-2015-8480

CWE: 119, 190, 416, 843

RHSA: 2015:2545