The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:3377 advisory.

    Chromium is an open-source web browser, powered by WebKit (Blink).

    This update upgrades Chromium to version 84.0.4147.105.

    Security Fix(es):

    * chromium-browser: Heap buffer overflow in background fetch (CVE-2020-6510)

    * chromium-browser: Side-channel information leakage in content security policy (CVE-2020-6511)

    * chromium-browser: Type Confusion in V8 (CVE-2020-6512)

    * chromium-browser: Heap buffer overflow in PDFium (CVE-2020-6513)

    * chromium-browser: Inappropriate implementation in WebRTC (CVE-2020-6514)

    * chromium-browser: Use after free in tab strip (CVE-2020-6515)

    * chromium-browser: Policy bypass in CORS (CVE-2020-6516)

    * chromium-browser: Heap buffer overflow in history (CVE-2020-6517)

    * chromium-browser: Use after free in SCTP (CVE-2020-6532)

    * chromium-browser: Type Confusion in V8 (CVE-2020-6537)

    * chromium-browser: Inappropriate implementation in WebView (CVE-2020-6538)

    * chromium-browser: Use after free in CSS (CVE-2020-6539)

    * chromium-browser: Heap buffer overflow in Skia (CVE-2020-6540)

    * chromium-browser: Use after free in WebUSB (CVE-2020-6541)

    * chromium-browser: Use after free in developer tools (CVE-2020-6518)

    * chromium-browser: Policy bypass in CSP (CVE-2020-6519)

    * chromium-browser: Heap buffer overflow in Skia (CVE-2020-6520)

    * chromium-browser: Side-channel information leakage in autofill (CVE-2020-6521)

    * chromium-browser: Inappropriate implementation in external protocol handlers (CVE-2020-6522)

    * chromium-browser: Out of bounds write in Skia (CVE-2020-6523)

    * chromium-browser: Heap buffer overflow in WebAudio (CVE-2020-6524)

    * chromium-browser: Heap buffer overflow in Skia (CVE-2020-6525)

    * chromium-browser: Inappropriate implementation in iframe sandbox (CVE-2020-6526)

    * chromium-browser: Insufficient policy enforcement in CSP (CVE-2020-6527)

    * chromium-browser: Incorrect security UI in basic auth (CVE-2020-6528)

    * chromium-browser: Inappropriate implementation in WebRTC (CVE-2020-6529)

    * chromium-browser: Out of bounds memory access in developer tools (CVE-2020-6530)

    * chromium-browser: Side-channel information leakage in scroll to text (CVE-2020-6531)

    * chromium-browser: Type Confusion in V8 (CVE-2020-6533)

    * chromium-browser: Heap buffer overflow in WebRTC (CVE-2020-6534)

    * chromium-browser: Insufficient data validation in WebUI (CVE-2020-6535)

    * chromium-browser: Incorrect security UI in PWAs (CVE-2020-6536)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 6 : chromium-browser (RHSA-2020:3377)

critical Nessus Plugin ID 139467

Version 1.11

Version 1.10

Version 1.9

Version 1.11 Nov 7, 2024, 8:52 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Plugin metadata Plugin Feed: 202411070852
Version 1.10 Nov 5, 2024, 12:50 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202411051250
Version 1.9 Jan 23, 2023, 7:12 PM Logic Changes (Added support for repository relative URLs) Plugin Feed: 202301231912