A stack buffer overflow in NumberingSystem in International Components for Unicode (ICU) for C/C++ before 60.2, as used in V8 in Google Chrome prior to 62.0.3202.75 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Update to Chromium 65. For EPEL7, it has been a long time since a successful build has been possible, so this will fix a LOT of CVEs.

CVE-2017-15396 CVE-2017-15407 CVE-2017-15408 CVE-2017-15409 CVE-2017-15410 CVE-2017-15411 CVE-2017-15412 CVE-2017-15413 CVE-2017-15415 CVE-2017-15416 CVE-2017-15417 CVE-2017-15418 CVE-2017-15419 CVE-2017-15420 CVE-2017-15422 CVE-2018-6056 CVE-2018-6406 CVE-2018-6057 CVE-2018-6058 CVE-2018-6059 CVE-2018-6060 CVE-2018-6061 CVE-2018-6062 CVE-2018-6063 CVE-2018-6064 CVE-2018-6065 CVE-2018-6066 CVE-2018-6067 CVE-2018-6068 CVE-2018-6069 CVE-2018-6070 CVE-2018-6071

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of Google Chrome installed on the remote host is prior to 62.0.3202.75, and is affected by multiple vulnerabilities :

 - An overflow condition exists in the 'NumberingSystem::createInstance()' function in 'i18n/numsys.cpp' that is triggered when handling locale strings with an overly long 'numbers' keyword value. This may allow a context-dependent attacker to cause a buffer overflow and potentially execute arbitrary code. (CVE-2017-15406)
 - An overflow condition exists that is triggered when handling keyword values, which are not NUL-terminated. This may allow a context-dependent attacker to cause a buffer overflow and potentially execute arbitrary code. (CVE-2017-15396)

An update of QtWebEngine to the security and bugfix release 5.9.3, including :

  - Security fixes from Chromium up to version 62.0.3202.89.
    Including: CVE-2017-5124, CVE-2017-5126, CVE-2017-5127,     CVE-2017-5128, CVE-2017-5129, CVE-2017-5132,     CVE-2017-5133, CVE-2017-15386, CVE-2017-15387,     CVE-2017-15388, CVE-2017-15390, CVE-2017-15392,     CVE-2017-15394, CVE-2017-15396, CVE-2017-15398.

  - QtWebEngineCore: [QTBUG-64032] Fix crash after resizing     view to be empty.

  - QtWebEngine[QML]: Fix loading some favicons including     qt.io's

  - QtWebEngineWidgets: [QTBUG-62147] Fix crash on shutdown     if a QWebEngineProfile was child of QApplication.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201711-02 (Chromium, Google Chrome: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Chromium and Google       Chrome. Please review the referenced CVE identifier and Google Chrome       Releases for details.
  Impact :

    A remote attack may be able to execute arbitrary code, cause a Denial of       Service condition, or have other unspecified impacts.
  Workaround :

    There is no known workaround at this time.

Several vulnerabilities have been discovered in the chromium web browser.

In addition, this message serves as an annoucment that security support for chromium in the oldstable release (jessie), Debian 8, is now discontinued.

Debian 8 chromium users that desire continued security updates are strongly encouraged to upgrade now to the current stable release (stretch), Debian 9.

An alternative is to switch to the firefox browser, which will continue to receive security updates in jessie for some time.

  - CVE-2017-5124     A cross-site scripting issue was discovered in MHTML.

  - CVE-2017-5125     A heap overflow issue was discovered in the skia     library.

  - CVE-2017-5126     Luat Nguyen discovered a use-after-free issue in the     pdfium library.

  - CVE-2017-5127     Luat Nguyen discovered another use-after-free issue in     the pdfium library.

  - CVE-2017-5128     Omair discovered a heap overflow issue in the WebGL     implementation.

  - CVE-2017-5129     Omair discovered a use-after-free issue in the WebAudio     implementation.

  - CVE-2017-5131     An out-of-bounds write issue was discovered in the skia     library.

  - CVE-2017-5132     Guarav Dewan discovered an error in the WebAssembly     implementation.

  - CVE-2017-5133     Aleksandar Nikolic discovered an out-of-bounds write     issue in the skia library.

  - CVE-2017-15386     WenXu Wu discovered a user interface spoofing issue.

  - CVE-2017-15387     Jun Kokatsu discovered a way to bypass the content     security policy.

  - CVE-2017-15388     Kushal Arvind Shah discovered an out-of-bounds read     issue in the skia library.

  - CVE-2017-15389     xisigr discovered a URL spoofing issue.

  - CVE-2017-15390     Haosheng Wang discovered a URL spoofing issue.

  - CVE-2017-15391     Joao Lucas Melo Brasio discovered a way for an extension     to bypass its limitations.

  - CVE-2017-15392     Xiaoyin Liu discovered an error the implementation of     registry keys.

  - CVE-2017-15393     Svyat Mitin discovered an issue in the devtools.

  - CVE-2017-15394     Sam discovered a URL spoofing issue.

  - CVE-2017-15395     Johannes Bergman discovered a NULL pointer dereference     issue.

  - CVE-2017-15396     Yuan Deng discovered a stack overflow issue in the v8     JavaScript library.

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2017:3082 advisory.

  - , CVE-2017-15406 chromium-browser: stack overflow in v8 (CVE-2017-15396, CVE-2017-15406)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update to Chromium 62.0.3202.75 fixes the following security issues :

  - CVE-2017-5124: UXSS with MHTML

  - CVE-2017-5125: Heap overflow in Skia

  - CVE-2017-5126: Use after free in PDFium 

  - CVE-2017-5127: Use after free in PDFium

  - CVE-2017-5128: Heap overflow in WebGL

  - CVE-2017-5129: Use after free in WebAudio 

  - CVE-2017-5132: Incorrect stack manipulation in     WebAssembly.

  - CVE-2017-5130: Heap overflow in libxml2

  - CVE-2017-5131: Out of bounds write in Skia 

  - CVE-2017-5133: Out of bounds write in Skia 

  - CVE-2017-15386: UI spoofing in Blink

  - CVE-2017-15387: Content security bypass

  - CVE-2017-15388: Out of bounds read in Skia

  - CVE-2017-15389: URL spoofing in OmniBox

  - CVE-2017-15390: URL spoofing in OmniBox 

  - CVE-2017-15391: Extension limitation bypass in     Extensions.

  - CVE-2017-15392: Incorrect registry key handling in     PlatformIntegration

  - CVE-2017-15393: Referrer leak in Devtools

  - CVE-2017-15394: URL spoofing in extensions UI

  - CVE-2017-15395: NULL pointer dereference in ImageCapture

  - CVE-2017-15396: Stack overflow in V8

Google Chrome Releases reports :

2 security fixes in this release, including :

- [770452] High CVE-2017-15396: Stack overflow in V8. Reported by Yuan Deng of Ant-financial Light-Year Security Lab on 2017-09-30

- [770450] Medium CVE-2017-15406: Stack overflow in V8. Reported by Yuan Deng of Ant-financial Light-Year Security Lab on 2017-09-30

ID	Name	Product	Family	Severity
120695	Fedora 28 : chromium (2018-aafdbb5554)	Nessus	Fedora Local Security Checks	high
700347	Google Chrome < 62.0.3202.75 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	high
108679	Fedora 27 : chromium (2018-faff5f661e)	Nessus	Fedora Local Security Checks	high
105822	Fedora 27 : qt5-qtwebengine (2017-15b815b9b7)	Nessus	Fedora Local Security Checks	critical
105012	Fedora 25 : qt5-qtwebengine (2017-9015553e3d)	Nessus	Fedora Local Security Checks	critical
105010	Fedora 26 : qt5-qtwebengine (2017-4d90e9fc97)	Nessus	Fedora Local Security Checks	critical
104510	GLSA-201711-02 : Chromium, Google Chrome: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
104414	Debian DSA-4020-1 : chromium-browser - security update	Nessus	Debian Local Security Checks	high
104267	RHEL 6 : chromium-browser (RHSA-2017:3082)	Nessus	Red Hat Local Security Checks	high
104244	openSUSE Security Update : chromium (openSUSE-2017-1221)	Nessus	SuSE Local Security Checks	high
104227	FreeBSD : chromium -- Stack overflow in V8 (3cd46257-bbc5-11e7-a3bc-e8e0b747a45a)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2017-15396

medium

Tenable Plugins

high

high

high

critical

critical

critical

critical

high

high

high

high