This update to Chromium version 71.0.3578.80 fixes security issues and bugs.

Security issues fixed (boo#1118529) :

  - CVE-2018-17480: Out of bounds write in V8

  - CVE-2018-17481: Use after frees in PDFium

  - CVE-2018-18335: Heap buffer overflow in Skia

  - CVE-2018-18336: Use after free in PDFium

  - CVE-2018-18337: Use after free in Blink

  - CVE-2018-18338: Heap buffer overflow in Canvas

  - CVE-2018-18339: Use after free in WebAudio

  - CVE-2018-18340: Use after free in MediaRecorder

  - CVE-2018-18341: Heap buffer overflow in Blink

  - CVE-2018-18342: Out of bounds write in V8

  - CVE-2018-18343: Use after free in Skia

  - CVE-2018-18344: Inappropriate implementation in     Extensions

  - Multiple issues in SQLite via WebSQL

  - CVE-2018-18345: Inappropriate implementation in Site     Isolation

  - CVE-2018-18346: Incorrect security UI in Blink

  - CVE-2018-18347: Inappropriate implementation in     Navigation

  - CVE-2018-18348: Inappropriate implementation in Omnibox

  - CVE-2018-18349: Insufficient policy enforcement in Blink

  - CVE-2018-18350: Insufficient policy enforcement in Blink

  - CVE-2018-18351: Insufficient policy enforcement in     Navigation

  - CVE-2018-18352: Inappropriate implementation in Media

  - CVE-2018-18353: Inappropriate implementation in Network     Authentication

  - CVE-2018-18354: Insufficient data validation in Shell     Integration

  - CVE-2018-18355: Insufficient policy enforcement in URL     Formatter

  - CVE-2018-18356: Use after free in Skia

  - CVE-2018-18357: Insufficient policy enforcement in URL     Formatter

  - CVE-2018-18358: Insufficient policy enforcement in Proxy

  - CVE-2018-18359: Out of bounds read in V8

  - Inappropriate implementation in PDFium

  - Use after free in Extensions

  - Inappropriate implementation in Navigation

  - Insufficient policy enforcement in Navigation

  - Insufficient policy enforcement in URL Formatter

  - Various fixes from internal audits, fuzzing and other     initiatives

The following changes are included :

  - advertisements posing as error messages are now blocked

  - Automatic playing of content at page load mostly     disabled

  - New JavaScript API for relative time display

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2018:3803 advisory.

    Chromium is an open-source web browser, powered by WebKit (Blink).

    This update upgrades Chromium to version 71.0.3578.80.

    Security Fix(es):

    * chromium-browser: Out of bounds write in V8 (CVE-2018-17480)

    * chromium-browser: Use after frees in PDFium (CVE-2018-17481)

    * chromium-browser: Heap buffer overflow in Skia (CVE-2018-18335)

    * chromium-browser: Use after free in PDFium (CVE-2018-18336)

    * chromium-browser: Use after free in Blink (CVE-2018-18337)

    * chromium-browser: Heap buffer overflow in Canvas (CVE-2018-18338)

    * chromium-browser: Use after free in WebAudio (CVE-2018-18339)

    * chromium-browser: Use after free in MediaRecorder (CVE-2018-18340)

    * chromium-browser: Heap buffer overflow in Blink (CVE-2018-18341)

    * chromium-browser: Out of bounds write in V8 (CVE-2018-18342)

    * chromium-browser: Use after free in Skia (CVE-2018-18343)

    * chromium-browser: Inappropriate implementation in Extensions (CVE-2018-18344)

    * chromium-browser: Inappropriate implementation in Site Isolation (CVE-2018-18345)

    * chromium-browser: Incorrect security UI in Blink (CVE-2018-18346)

    * chromium-browser: Inappropriate implementation in Navigation (CVE-2018-18347)

    * chromium-browser: Inappropriate implementation in Omnibox (CVE-2018-18348)

    * chromium-browser: Insufficient policy enforcement in Blink (CVE-2018-18349)

    * chromium-browser: Insufficient policy enforcement in Blink (CVE-2018-18350)

    * chromium-browser: Insufficient policy enforcement in Navigation (CVE-2018-18351)

    * chromium-browser: Inappropriate implementation in Media (CVE-2018-18352)

    * chromium-browser: Inappropriate implementation in Network Authentication (CVE-2018-18353)

    * chromium-browser: Insufficient data validation in Shell Integration (CVE-2018-18354)

    * chromium-browser: Insufficient policy enforcement in URL Formatter (CVE-2018-18355)

    * chromium-browser: Use after free in Skia (CVE-2018-18356)

    * chromium-browser: Insufficient policy enforcement in URL Formatter (CVE-2018-18357)

    * chromium-browser: Insufficient policy enforcement in Proxy (CVE-2018-18358)

    * chromium-browser: Out of bounds read in V8 (CVE-2018-18359)

    For more details about the security issue(s), including the impact, a CVSS score, and other related     information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote host is prior to 65.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-04 advisory:

 - A use-after-free vulnerability in the Skia library can occur when creating a path, leading to a potentially exploitable crash. (CVE-2018-18356)
 - An integer overflow vulnerability in the Skia library can occur after specific transform operations, leading to a potentially exploitable crash. (CVE-2019-5785)
 - Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. Note: This only affects Firefox 65. Previous versions are unaffected. (CVE-2018-18511)

 Note that Nessus Network Monitor has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
123398	openSUSE Security Update : Chromium (openSUSE-2019-977)	Nessus	SuSE Local Security Checks	3/27/2019	6/7/2024	high
119568	RHEL 6 : chromium-browser (RHSA-2018:3803)	Nessus	Red Hat Local Security Checks	12/11/2018	11/5/2024	high
700486	Mozilla Firefox < 65.0.1 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	3/29/2019	3/29/2019	high

Detections

Analytics

Plugins Search

high

high

high