The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5125 advisory.

  - Use after free in File Manager in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to     potentially exploit heap corruption via specific and direct user interaction. (CVE-2022-1496)

  - Use after free in Vulkan in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2022-1477)

  - Use after free in SwiftShader in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2022-1478)

  - Use after free in ANGLE in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2022-1479)

  - Use after free in Sharing in Google Chrome on Mac prior to 101.0.4951.41 allowed a remote attacker who     convinced a user to engage in specific user interaction to potentially exploit heap corruption via a     crafted HTML page. (CVE-2022-1481)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian DSA-5125-1 : chromium - security update

high Nessus Plugin ID 160294

Version 1.9

Version 1.8

Version 1.7

Version 1.9 Mar 23, 2023, 8:46 PM Plugin requirements Plugin Feed: 202303232046
Version 1.8 Mar 21, 2023, 7:30 PM Plugin metadata Plugin Feed: 202303211930
Version 1.7 Dec 1, 2022, 1:47 PM Plugin metadata (Removed rejected CVE-2022-1480 referenced in multiple plugins) Plugin Feed: 202212011347