Inappropriate implementation in V8 in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

The remote CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:1350 advisory.

  - Use after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2020-6450, CVE-2020-6451)

  - Heap buffer overflow in media in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2020-6452)

  - Inappropriate implementation in V8 in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2020-6453)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the nodejs package has been released.

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:1350 advisory.

    Chromium is an open-source web browser, powered by WebKit (Blink).

    This update upgrades Chromium to version 80.0.3987.162.

    Security Fix(es):

    * chromium-browser: Use after free in WebAudio (CVE-2020-6450)

    * chromium-browser: Use after free in WebAudio (CVE-2020-6451)

    * chromium-browser: Heap buffer overflow in media (CVE-2020-6452)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
208456	CentOS 6 : chromium-browser (RHSA-2020:1350)	Nessus	CentOS Local Security Checks	high
204114	Photon OS 3.0: Nodejs PHSA-2023-3.0-0602	Nessus	PhotonOS Local Security Checks	critical
135243	RHEL 6 : chromium-browser (RHSA-2020:1350)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2020-6453

high

Tenable Plugins

high

critical

high