Debian DSA-4911-1 : chromium - security update

high Nessus Plugin ID 149250

Language:

Synopsis

The remote Debian host is missing a security-related update.

Description

Several vulnerabilities have been discovered in the chromium web browser.

- CVE-2021-21227 Gengming Liu discovered a data validation issue in the v8 JavaScript library.

- CVE-2021-21228 Rob Wu discovered a policy enforcement error.

- CVE-2021-21229 Mohit Raj discovered a user interface error in the file downloader.

- CVE-2021-21230 Manfred Paul discovered use of an incorrect type.

- CVE-2021-21231 Sergei Glazunov discovered a data validation issue in the v8 JavaScript library.

- CVE-2021-21232 Abdulrahman Alqabandi discovered a use-after-free issue in the developer tools.

- CVE-2021-21233 Omair discovered a buffer overflow issue in the ANGLE library.

Solution

Upgrade the chromium packages.

For the stable distribution (buster), these problems have been fixed in version 90.0.4430.93-1~deb10u1.

Plugin Details

Severity: High

ID: 149250

File Name: debian_DSA-4911.nasl

Version: 1.4

Type: local

Agent: unix

Family: Debian Local Security Checks

Published: 5/4/2021

Updated: 1/12/2024

Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS Score Source: CVE-2021-21233

CVSS v3

Risk Factor: High

Base Score: 8.8

Temporal Score: 7.7

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:debian:debian_linux:10.0, p-cpe:/a:debian:debian_linux:chromium

Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l

Exploit Ease: No known exploits are available

Patch Publication Date: 5/3/2021

Vulnerability Publication Date: 4/30/2021

Reference Information

CVE: CVE-2021-21227, CVE-2021-21228, CVE-2021-21229, CVE-2021-21230, CVE-2021-21231, CVE-2021-21232, CVE-2021-21233

DSA: 4911

Detections

Analytics