Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

The remote CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:5165 advisory.

  - Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2020-16013)

  - Inappropriate implementation in base in Google Chrome prior to 86.0.4240.193 allowed a remote attacker who     had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    (CVE-2020-16016)

  - Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had     compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    (CVE-2020-16017)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Multiple security issues were discovered in the Chromium web browser, which could result in the execution of arbitrary code, denial of service or information disclosure.

This update for opera fixes the following issues :

  - Update to version 72.0.3815.400

  - DNA-88996 [Mac] Vertical spacing of sidebar items     incorrect

  - DNA-89698 [Mac] text on bookmark bar not visible when     application is not focused

  - DNA-89746 Add product-name switch to Opera launcher and     installer

  - DNA-89779 Implement multi-window behavior for pinned     Player

  - DNA-89924 Music continue to play after the disabling     Player from Sidebar

  - DNA-89994 Fix progress bar shape and color

  - DNA-89995 Fix font sizes, weights and colors of text in     control panel

  - DNA-90010 Payment Methods in Settings mention Google     account

  - DNA-90022 [Mac][BigSur] Crash at
    -[BrowserWindowController     window:willPositionSheet:usingRect:]

  - DNA-90025 Player stays in the autopause after reloading     panel &ndash; part 2

  - DNA-90096 Sidebar click stat not collected for Player

  - DNA-90143 Adding a stat for Player sidebar clicks to the     Avro schema

  - Update to version 72.0.3815.378

  - CHR-8192 Update chromium on desktop-stable-86-3815 to     86.0.4240.198

  - DNA-86550 XHRUint8Array test time out

  - DNA-88631 Unintended volume drop

  - DNA-88708 [Snap] Inproper area snapped

  - DNA-88726 [Mac] Overlay &lsquo;pause&rsquo; icon when     Opera auto-pauses the Player

  - DNA-88903 Detach video button should not be visible

  - DNA-88938 Make home page reflect service configuration

  - DNA-88943 Learn more link on home page doesnt work

  - DNA-88944 Apple Music service slow to open

  - DNA-88948 Fetch audio focus request id from MediaSession

  - DNA-88949 Detach video button missing

  - DNA-88966 No accessiblity titles for services icons in     home page

  - DNA-88967 Investigate creating a single     BrowserSidebarModel instance

  - DNA-88995 Overlay &ldquo;pause&rdquo; is displayed when     it shouldn&rsquo;t

  - DNA-89017 Error when signing out of YouTube Music

  - DNA-89054 Audio is not resumed when muting audio in tab

  - DNA-89094 DCHECK when pressing Reload button

  - DNA-89095 Manage service data through PlayerService

  - DNA-89100 [Player] Crash &ndash; many scenarios

  - DNA-89187 Reload button doesn&rsquo;t work properly

  - DNA-89189 Update icons and buttons

  - DNA-89217 Enable #player-service on developer stream

  - DNA-89220 SidebarCarouselTests.* failing

  - DNA-89230 Crash at v8::Context::Enter()

  - DNA-89244 Define default widths per service

  - DNA-89245 Improve Spotify logo layout in home page     buttons

  - DNA-89248 Crash at     opera::WebPageBrowserSidebarItemContentViewViews     ::UpdatePlayerService()

  - DNA-89278 [Sidebar] No notification for downloads and     workspaces

  - DNA-89285 [Engine] Unable to launch skype with Opera

  - DNA-89292 Do not block page loads waiting for sitecheck     data

  - DNA-89316 Should be able to navigate directly to     playerServices section in settings

  - DNA-89339 Make popup appear with tooltip-like behavior

  - DNA-89340 Implement control panel looks in light and     dark mode

  - DNA-89341 Make the control panel buttons work

  - DNA-89342 Add support for the DNA to the rollout system

  - DNA-89344 Show Music Service icon in the control panel

  - DNA-89360 Make &lsquo;Settings&rsquo; menu entry go to     settings

  - DNA-89366 Make opera://feedback/babe attachable by the     webdriver

  - DNA-89419 Crash at base::Value::GetAsDictionary     (base::DictionaryValue const**) const

  - DNA-89469 Autopause does not work

  - DNA-89477 Do not wait with starting the player if the     interrupting session is short

  - DNA-89480 Crash when hovering player panel

  - DNA-89484 Crash at     base::internal::CheckedObserverAdapter     ::IsMarkedForRemoval()

  - DNA-89489 Put control panel behind feature flag

  - DNA-89514 Implement feedback button for Player

  - DNA-89516 Do not auto-pause the Player when there is no     sound

  - DNA-89553 Make the control panel show current song

  - DNA-89557 No accessibility title for rating and close     buttons inside feedback dialog

  - DNA-89561 Make the control panel show artwork that     represents current track

  - DNA-89575 Handle longer track and artist names

  - DNA-89577 Make progress bar work correctly

  - DNA-89630 Controler pop-up is too high (and service logo     too)

  - DNA-89634 Panel width is reset when it shouldn&rsquo;t

  - DNA-89654 Request higher resolution images for HiDPI

  - DNA-89655 Enable #player-service-control-panel on     Developer stream

  - DNA-89671 No accessiblity titles for control panel     elements

  - DNA-89672 String change &ldquo;A world of     music&hellip;&rdquo;

  - DNA-89679 Player &mdash; don&rsquo;t show control panel     when Player in sidebar is opened

  - DNA-89722 Album cover arts are not visible

  - DNA-89766 Address bar does not respond to actions

  - DNA-89776 Control panel does not disappear after     hovering elsewhere

  - DNA-89778 Implement multi-window behavior when no Player     is pinned

  - DNA-89795 Player is enable after Opera restart (when in     Settings was turned off)

  - DNA-89803 Artwork is cropped to the right

  - DNA-89812 Sidebar panel should hide when toggle between     windows

  - DNA-89820 Incorrect music services for Philippines

  - DNA-89846 Do not show the control panel if there is     nothing to show

  - DNA-89878 Clarify notification dot for messengers

  - DNA-89901 [Mac][Player] Zombie crash at exit

  - DNA-89952 Crash at     opera::BrowserSidebarPlayerItemContentViewViews     ::LoadPlayerServiceURL()

  - DNA-89964 Player stays in the autopause after reloading     panel

  - DNA-89971 Multi window behaviour is not respected     anymore

  - DNA-89976 Disallow docking for Player

  - DNA-89986 Enable #player-service and     #player-service-control-panel on all streams

  - DNA-90006 Change services order in RU/UA/BY

  - The update to chromium 86.0.4240.198 fixes following     issues: CVE-2020-16013, CVE-2020-16017

Update to 87.0.4280.66. Fixes bugs and security holes. Yay!

CVE-2020-16012 CVE-2020-16018 CVE-2020-16019 CVE-2020-16020 CVE-2020-16021 CVE-2020-16022 CVE-2020-16015 CVE-2020-16014 CVE-2020-16023 CVE-2020-16024 CVE-2020-16025 CVE-2020-16026 CVE-2020-16027 CVE-2020-16028 CVE-2020-16029 CVE-2020-16030 CVE-2020-16031 CVE-2020-16032 CVE-2020-16033 CVE-2020-16034 CVE-2020-16035 CVE-2020-16036

----

Update to 86.0.4240.198. Fixes the following security issues :

CVE-2020-16013 CVE-2020-16016 CVE-2020-16017

----

Update to 86.0.4240.183.

Fixes the following security issues: CVE-2020-16004 CVE-2020-16005 CVE-2020-16006 CVE-2020-16008 CVE-2020-16009

Also disables the very verbose output going to stdout.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:5165 advisory.

    Chromium is an open-source web browser, powered by WebKit (Blink).

    This update upgrades Chromium to version 86.0.4240.198.

    Security Fix(es):

    * chromium-browser: Inappropriate implementation in V8 (CVE-2020-16013)

    * chromium-browser: Inappropriate implementation in base (CVE-2020-16016)

    * chromium-browser: Use after free in site isolation (CVE-2020-16017)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Update to 86.0.4240.198. Fixes the following security issues :

CVE-2020-16013 CVE-2020-16016 CVE-2020-16017

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for chromium fixes the following issues :

Update to 86.0.4240.198 (boo#1178703)

  - CVE-2020-16013: Inappropriate implementation in V8

  - CVE-2020-16017: Use after free in site isolation

Update to 86.0.4240.193 (boo#1178630)

  - CVE-2020-16016: Inappropriate implementation in base.

The remote host is affected by the vulnerability described in GLSA-202011-16 (Chromium, Google Chrome: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Chromium and Google       Chrome. Please review the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The version of Microsoft Edge installed on the remote Windows host is prior to 86.0.622.69. It is, therefore, affected by multiple vulnerabilities as referenced in the ADV200002-11-13-2020 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote host is prior to 86.0.4240.198. It is, therefore, affected by multiple vulnerabilities as referenced in the 2020_11_stable-channel-update-for-desktop_11 advisory. Note that Nessus Network Monitor has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote Windows host is prior to 86.0.4240.198. It is, therefore, affected by multiple vulnerabilities as referenced in the 2020_11_stable-channel-update-for-desktop_11 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote macOS host is prior to 86.0.4240.198. It is, therefore, affected by multiple vulnerabilities as referenced in the 2020_11_stable-channel-update-for-desktop_11 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
208553	CentOS 6 : chromium-browser (RHSA-2020:5165)	Nessus	CentOS Local Security Checks	critical
144672	Debian DSA-4824-1 : chromium - security update	Nessus	Debian Local Security Checks	critical
143498	openSUSE Security Update : opera (openSUSE-2020-2178)	Nessus	SuSE Local Security Checks	critical
143227	Fedora 32 : chromium (2020-3e005ce2e0)	Nessus	Fedora Local Security Checks	critical
143164	RHEL 6 : chromium-browser (RHSA-2020:5165)	Nessus	Red Hat Local Security Checks	critical
143140	Fedora 33 : chromium (2020-2d0c0ee838)	Nessus	Fedora Local Security Checks	critical
142941	openSUSE Security Update : chromium (openSUSE-2020-1929)	Nessus	SuSE Local Security Checks	critical
142933	GLSA-202011-16 : Chromium, Google Chrome: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
142901	Microsoft Edge (Chromium) < 86.0.622.69 Multiple Vulnerabilities	Nessus	Windows	critical
701292	Google Chrome < 86.0.4240.198 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	high
142719	Google Chrome < 86.0.4240.198 Multiple Vulnerabilities	Nessus	Windows	critical
142718	Google Chrome < 86.0.4240.198 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	critical

Detections

Analytics

CVE-2020-16013

high

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

high

critical

critical