Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

This update for opera fixes the following issues :

  - Opera was updated to version 75.0.3969.171 (boo#1184256)     CVE-2021-21194, CVE-2021-21195, CVE-2021-21196,     CVE-2021-21197, CVE-2021-21198, CVE-2021-21199,     CVE-2021-21191, CVE-2021-21192, CVE-2021-21193

The remote host is affected by the vulnerability described in GLSA-202104-08 (Chromium, Google Chrome: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Chromium and Google       Chrome. Please review the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

Chrome Releases reports :

This update contains 8 security fixes, including :

- [1181228] High CVE-2021-21194: Use after free in screen capture.
Reported by Leecraso and Guang Gong of 360 Alpha Lab on 2021-02-23

- [1182647] High CVE-2021-21195: Use after free in V8. Reported by Bohan Liu (@P4nda20371774) and Moon Liang of Tencent Security Xuanwu Lab on 2021-02-26

- [1175992] High CVE-2021-21196: Heap buffer overflow in TabStrip.
Reported by Khalil Zhani on 2021-02-08

- [1173903] High CVE-2021-21197: Heap buffer overflow in TabStrip.
Reported by Abdulrahman Alqabandi, Microsoft Browser Vulnerability Research on 2021-02-03

- [1184399] High CVE-2021-21198: Out of bounds read in IPC. Reported by Mark Brand of Google Project Zero on 2021-03-03

- [1179635] High CVE-2021-21199: Use Use after free in Aura. Reported by Weipeng Jiang (@Krace) from Codesafe Team of Legendsec at Qi'anxin Group and Evangelos Foutras

Several vulnerabilites have been discovered in the chromium web browser.

  - CVE-2021-21159     Khalil Zhani discovered a buffer overflow issue in the     tab implementation.

  - CVE-2021-21160     Marcin Noga discovered a buffer overflow issue in     WebAudio.

  - CVE-2021-21161     Khalil Zhani discovered a buffer overflow issue in the     tab implementation.

  - CVE-2021-21162     A use-after-free issue was discovered in the WebRTC     implementation.

  - CVE-2021-21163     Alison Huffman discovered a data validation issue.

  - CVE-2021-21165     Alison Huffman discovered an error in the audio     implementation.

  - CVE-2021-21166     Alison Huffman discovered an error in the audio     implementation.

  - CVE-2021-21167     Leecraso and Guang Gong discovered a use-after-free     issue in the bookmarks implementation.

  - CVE-2021-21168     Luan Herrera discovered a policy enforcement error in     the appcache.

  - CVE-2021-21169     Bohan Liu and Moon Liang discovered an out-of-bounds     access issue in the v8 JavaScript library.

  - CVE-2021-21170     David Erceg discovered a user interface error.

  - CVE-2021-21171     Irvan Kurniawan discovered a user interface error.

  - CVE-2021-21172     Maciej Pulikowski discovered a policy enforcement error     in the File System API.

  - CVE-2021-21173     Tom Van Goethem discovered a network based information     leak.

  - CVE-2021-21174     Ashish Guatam Kambled discovered an implementation error     in the Referrer policy.

  - CVE-2021-21175     Jun Kokatsu discovered an implementation error in the     Site Isolation feature.

  - CVE-2021-21176     Luan Herrera discovered an implementation error in the     full screen mode.

  - CVE-2021-21177     Abdulrahman Alqabandi discovered a policy enforcement     error in the Autofill feature.

  - CVE-2021-21178     Japong discovered an error in the Compositor     implementation.

  - CVE-2021-21179     A use-after-free issue was discovered in the networking     implementation.

  - CVE-2021-21180     Abdulrahman Alqabandi discovered a use-after-free issue     in the tab search feature.

  - CVE-2021-21181     Xu Lin, Panagiotis Ilias, and Jason Polakis discovered a     side-channel information leak in the Autofill feature.

  - CVE-2021-21182     Luan Herrera discovered a policy enforcement error in     the site navigation implementation.

  - CVE-2021-21183     Takashi Yoneuchi discovered an implementation error in     the Performance API.

  - CVE-2021-21184     James Hartig discovered an implementation error in the     Performance API.

  - CVE-2021-21185     David Erceg discovered a policy enforcement error in     Extensions.

  - CVE-2021-21186     dhirajkumarnifty discovered a policy enforcement error     in the QR scan implementation.

  - CVE-2021-21187     Kirtikumar Anandrao Ramchandani discovered a data     validation error in URL formatting.

  - CVE-2021-21188     Woojin Oh discovered a use-after-free issue in     Blink/Webkit.

  - CVE-2021-21189     Khalil Zhani discovered a policy enforcement error in     the Payments implementation.

  - CVE-2021-21190     Zhou Aiting discovered use of uninitialized memory in     the pdfium library.

  - CVE-2021-21191     raven discovered a use-after-free issue in the WebRTC     implementation.

  - CVE-2021-21192     Abdulrahman Alqabandi discovered a buffer overflow issue     in the tab implementation.

  - CVE-2021-21193     A use-after-free issue was discovered in Blink/Webkit.

  - CVE-2021-21194     Leecraso and Guang Gong discovered a use-after-free     issue in the screen capture feature.

  - CVE-2021-21195     Liu and Liang discovered a use-after-free issue in the     v8 JavaScript library.

  - CVE-2021-21196     Khalil Zhani discovered a buffer overflow issue in the     tab implementation.

  - CVE-2021-21197     Abdulrahman Alqabandi discovered a buffer overflow issue     in the tab implementation.

  - CVE-2021-21198     Mark Brand discovered an out-of-bounds read issue in the     Inter-Process Communication implementation.

  - CVE-2021-21199     Weipeng Jiang discovered a use-after-free issue in the     Aura window and event manager.

This update for chromium fixes the following issues :

Update to 89.0.4389.114 boo#1184256

  - CVE-2021-21194: Use after free in screen capture

  - CVE-2021-21195: Use after free in V8

  - CVE-2021-21196: Heap buffer overflow in TabStrip

  - CVE-2021-21197: Heap buffer overflow in TabStrip

  - CVE-2021-21198: Out of bounds read in IPC

  - CVE-2021-21199: Use Use after free in Aura

The version of Microsoft Edge installed on the remote Windows host is prior to 89.0.774.68. It is, therefore, affected by multiple vulnerabilities as referenced in the April 1, 2021 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote Windows host is prior to 89.0.4389.114. It is, therefore, affected by multiple vulnerabilities as referenced in the 2021_03_stable-channel-update-for-desktop_30 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote macOS host is prior to 89.0.4389.114. It is, therefore, affected by multiple vulnerabilities as referenced in the 2021_03_stable-channel-update-for-desktop_30 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
150114	openSUSE Security Update : opera (openSUSE-2021-592)	Nessus	SuSE Local Security Checks	high
149223	GLSA-202104-08 : Chromium, Google Chrome: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
148505	FreeBSD : chromium -- multiple vulnerabilities (bddadaa4-9227-11eb-99c5-e09467587c17)	Nessus	FreeBSD Local Security Checks	high
148364	Debian DSA-4886-1 : chromium - security update	Nessus	Debian Local Security Checks	high
148324	openSUSE Security Update : chromium (openSUSE-2021-513)	Nessus	SuSE Local Security Checks	high
148298	Microsoft Edge (Chromium) < 89.0.774.68 Multiple Vulnerabilities	Nessus	Windows	high
148243	Google Chrome < 89.0.4389.114 Multiple Vulnerabilities	Nessus	Windows	high
148242	Google Chrome < 89.0.4389.114 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	high

Detections

Analytics

CVE-2021-21197

high

Tenable Plugins

high

critical

high

high

high

high

high

high