Incorrect object lifetime calculations in GPU code in Google Chrome prior to 70.0.3538.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Description not provided by Debian for this vulnerability.
For further details on the vulnerability, contact Debian.

The remote host is affected by the vulnerability described in GLSA-201903-23 (Chromium: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Chromium and Google       Chrome. Please review the referenced CVE identifiers and Google Chrome       Releases for details.
  Impact :

    Please review the referenced CVE identifiers and Google Chrome Releases       for details.
  Workaround :

    There is no known workaround at this time.

This update for Chromium to version 70.0.3538.110 fixes the following security issue :

  - CVE-2018-17479: Use-after-free in GPU (boo#1116608)

Security fix for CVE-2018-17478 CVE-2018-17479. Update to 70.0.3538.110.

----

Update to chromium 70.0.3538.77. Fixes CVE-2018-16435 CVE-2018-17462 CVE-2018-17463 CVE-2018-17464 CVE-2018-17465 CVE-2018-17466 CVE-2018-17467 CVE-2018-17468 CVE-2018-17469 CVE-2018-17470 CVE-2018-17471 CVE-2018-17473 CVE-2018-17474 CVE-2018-17475 CVE-2018-17476 CVE-2018-5179 CVE-2018-17477

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2018-17478 CVE-2018-17479. Update to 70.0.3538.110.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Chromium is an open source web browser, powered by WebKit (Blink).

This update upgrades Chromium to version 70.0.3538.110.

Security Fix(es) :

* chromium-browser: Use-after-free in GPU (CVE-2018-17479)

* chromium-browser: Out of bounds memory access in V8 (CVE-2018-17478)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

The version of Google Chrome installed on the remote Windows host is prior to 70.0.3538.110. It is, therefore, affected by a vulnerability as noted in Google Chrome stable channel update release notes for 2018/11/19. Please refer to the release notes for additional information. Note that Nessus has not attempted to exploit these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote macOS host is prior to 70.0.3538.110. It is, therefore, affected by a vulnerability as noted in Google Chrome stable channel update release notes for 2018/11/19. Please refer to the release notes for additional information. Note that Nessus has not attempted to exploit these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
134332	Debian DSA-4342-1 : chromium-browser - security update	Nessus	Debian Local Security Checks	high
123429	GLSA-201903-23 : Chromium: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
123384	openSUSE Security Update : chromium (openSUSE-2019-945)	Nessus	SuSE Local Security Checks	high
120933	Fedora 28 : chromium (2018-fd194a1f14)	Nessus	Fedora Local Security Checks	critical
120607	Fedora 29 : chromium (2018-8e866c5066)	Nessus	Fedora Local Security Checks	high
119167	RHEL 6 : chromium-browser (RHSA-2018:3648)	Nessus	Red Hat Local Security Checks	high
119136	openSUSE Security Update : chromium (openSUSE-2018-1446)	Nessus	SuSE Local Security Checks	high
119097	Google Chrome < 70.0.3538.110 Vulnerability	Nessus	Windows	high
119096	Google Chrome < 70.0.3538.110 Vulnerability	Nessus	MacOS X Local Security Checks	high

Detections

Analytics

CVE-2018-17479

high

Tenable Plugins

high

high

high

critical

high

high

high

high

high